One could as well manipulate a PDF. The only way to prove that validity would be to digitally sign the Excel file or PDF - but that would involve a lot of costs, and guess what, most of our customers are not willing to pay for that ;)
Get someone to sit next to you while doing the download, and to sign that this is the original file, and there were no other downloads.