Long story short.
- Be prepared for disaster.
- Scan it. Sandbox it if concerned.
- Firewall inspect/block/allow every outbound comm.
- Get it from a trusted source.
Basically the same stuff you should be doing with all software.
Edit for firewall clarification.
The prices are going up for every provider. It’s across the board. Porkbun.com too.