Downloaded packages are not having their hash checked, package can attempt to run with corrupted files.
Digital signature of files, if removed, will cause the execution to fail.
Legacy Agent Communication (LAC) is enabled. This causes the agent to skip the hash check for the package in order to support older versions of the agent in the new 7.6 and beyond framework.
ITMS 7.6 and later.
Disable LAC to allow the agents to check the hashes of files within a package. This is done by clicking on the prompt when you first open the console indicating that legacy agent communication is enabled.