You could add additional security to the process by first validating some cryptographic signature or verifying that the downloaded content's hash matches one th

You could add additional security to the process by first validating some cryptographic signature or verifying that the downloaded content's hash matches one that the author published. Both of those just push the overall security a bit down the line, but both are ultimately not completely safe. The only truly safe action to take is to not download it at all.