My device will not download any file unless I authorized for it. I visit just the correct URL of known sites...
The fact that you visit the correct URLs does not guarantee that you cannot get to a phishing site. Scammers can change the DNS of the server, as it was very recently with Galxe.com , and even earlier with the Myetherwallet wallet. This way you will come to the phishing site on your own.