Neither the MacTrast nor the original 9to5 article discusses the security behind Apple’s iOS implementation. But we know all firmware packages are signed and I would imagine this would be no different, with the recovery partition OS performing a check of the signature.

A pre-registered checksum will ensure that the downloaded file is what it says it is before running. So yes, it is safe. Unless you’ve found a collision in the checksum algorithm apple is using, although the chances are better that you’ll squeeze water out of dry desert sand.

(Edit: To those thinking they’ll rely on just code signing for this, you’re likely way off base.)