To be fair, MD5 was broken in 1996. If your content addressable system uses crypto broken 10 years ago, of course, you can't guarantee integrity :-)

who is to say how much compute power state level adversaries bring to bear

Not enough to break modern hash functions.