CHECK A MAC DOWNLOAD BEFORE YOU OPEN IT
Verify the DMG.
When a build exists, every one is signed with a Developer ID certificate and notarized by Apple, and the ticket is stapled into the disk image so first launch works with no network. That covers tampering between Apple and you. The checksum next to the Mac button covers tampering between us and you.
Run this against the file you downloaded and compare it to the SHA-256 shown next to Get Mac app:
shasum -a 256 ~/Downloads/MeshVault-<version>-universal.dmg
If the two strings differ, stop. Do not open the file, and email contact@meshvault.ai.