Tbf, you could use portable / user installs (if everyone would actually do their apps right), you can (now) use a package manager and you can (sometimes...) get an official, verified version of an app through the store and even if not, installers are (usually.....) signed these days (although criminals do apparently get signatures too........)... And then this all falls apart, because you need a random driver from a random website. Security 👉👉