The checksums are not a defaults and are not meant to be changed from the inventories. Furthermore, role defaults have a lower priority that hosts facts, which technically means a rogue hosts could hijack the hashes for its variables.
