However, it might be interesting to use some sort of verifiable storage format where hashes of checkpoints are distributed elsewhere, so that if someone does manage to get into The Internet Archive, they can’t go fiddle with past things without it becoming visible.

Why not use a write only medium, like CDs but obviously bigger capacity. Write once read many kind of thing. It’s an archive, it should not be able to be changed.