PGP signatures should be 100x easier than checksums for normies on Windows with gpg4win. It's a simple install, and then you just download the .sig file next to the package and double click it. No terminal needed.
I think its as simple as sums on Linux as well. Sums are only good for ensuring the file was downloaded as it was advertised imo. Basically useless but better than nothing, and helpful for verifying corrupted or partial downloads.