A legitimate-looking link or valid digital signature can offer false reassurance. Here’s why familiar download safety checks ...