i'm not sure of the technical or potential security short commings, but would it be viable to have an option in a client to download the blockchain (which i understand to be relatively quick) and verify an md5 checksum from multiple trusted sources?
the potential benefit would be more rapidly being up to date, while still being in possession of the full blockchain, as apposed to the thin client option.