Basically, by not verifying, you're assuming the download is trusted. But there could be all sorts of bogus data in the blockchain.raw , if you have a man-in-the-middle attack during the download.

Personally, I only ever use blockchain.raw imports when I'm experimenting on very low power ARM devices, syncing up from scratch in nearly every case is significantly faster - and safer!