The current text in software.o.o matches the reality now (signed .sha256 files). The text will be improved shortly (it's still not perfect), but it's not wrong any more.