Or a zip package signed by the developer.

Now if only there was a way to safely pirate stuff without the possibility of the binaries having keyloggers or cryptominers embedded in them. I seem to recall some studio hosting an official torrent on their website precisely for this reason.