We should avoid any unnecessary download and if we really need one (like Electrum), we should inform us if it’s open source and if in question, avoid it.
A random download doesn’t justify to risk damaging our device, our data stored on it, as well as our coins, of course.
When downloading a cryptocurrency wallet, caution is essential. Always download from the official websites, where you'll find links for Android, PC, and MAC versions, and avoid unknown sources such as email links, YouTube, MediaFire, torrent sites, fake websites, blogs, and impersonated accounts.
I see that anyone interested in any unnecessary downloads on the computer or phone must use an alternative device that is free of important and sensitive data and his accounts and crypto wallets. Also, the risk extends to installing unofficial browser extensions, which can also threaten the user. Frankly, even if the program is open source, scammers may exploit people's lack of knowledge in examining the code. Anyone can check the program's security before installing it by uploading it to sites like VirusTotal and Jotti's Malware Scan, where many multiple antivirus programs will scan it.