Link directly downloads a .dmg

Open that? Not a chance.

https://choosy.app/ wfm.