Android SDK made available over HTTP, hashes not served securely

We all took the time to crap on linux mint for its crappy software distribution policies, but what happens when one of the biggest software shops in the world does it?

http://developer.android.com/sdk/index.html#Other