Fuck that, I don’t trust executables unless they’re signed, downloaded securely (e.g. HTTPS), and I trust the source I downloaded them from. Anything else might as well be a virus. If I can’t find a signed binary from a trustworthy source, I’m either not using it or I’m going to build it myself (after skimming through the code).