But if they're so confident in the disk, then why do they checksum the metadata? They should either trust the disk and have no checksums or not trust the disk and checksum everything.

There are plenty of other reasons not to checksum user data, as it's a choice many have made, but that they trust the disk is an invalid argument.