If you aren’t sure of a binary source trustworthiness, better not post it. Stick to what the devs officially publishes.