Every Freeware Download Site Is Serving Crapware
howtogeek.com
howtogeek.com
If I want HandBrake, I get it from handbrake.fr. I get VLC from videolan.org. I get OpenBSD from one of its mirrors. Etc. Etc.
So are download sites mainly for the subset of people who a) download software (a small percentage of all users) and b) don't know enough about that software to know where it comes from?
That's obviously wrong, but the problem wasn't helped by a bunch of projects using eg Sourceforge for hosting.
You can't expect non-experts to find, download, and install apps safely anymore.