Re: SHA256 was provided
'Even the Tor Project says that the number of downloads of hash and signature files is a tiny fraction of the overall downloads for Tor Browser. If the users of Tor Browser don’t care, users of Linux Mint are going to care even less.'
I'd be curious as to where you got that info, not that I doubt you, but I'd like to see what they say in detail. The TOR iso hash is actually on their website, as long as you trust the SSL (and not go to the length of verifying the gpg) you don't need to download it, just view the main page.