SQLite Forum

Suggestion: Use strong hashes on the download page
Any user that can download and run executables can download Fossil, OpenSSL, RHash, Python, Perl, or any number of other tools to verify the hash.

And since a common user of the SQLite downloads will have access to a compiler, they could just compile their own version of sha3sum.

Between that, and my assumption that only a small minority of users bother to verify the any hash or CRC beyond whatever verification their zip program does on its own, I'm not sure that means any Windows users are stuck.