My jaytag library SPI flash programmer does a CRC-32 of each sector rather than a full readback for speed reasons.
Any reason this is a terrible idea? I don't consider malicious flash a concern. It does have normal readback support, just takes longer.