for example, if the devs upload the file to Google Drive, wouldn't it be safer?
If we are talking about state-sponsored attacks, what makes you think that Google would be safer?
I assume they will have more trouble compromising it than bitcoin.org servers. I was just asking.