Websites offer that but you can usually find those in your favorite package manager

Most of the time the only thing you'll find in package managers for mainstream software is unofficial, and many times broken.

Downloading software from shady websites is the Windows way of doing things.

Then...don't do that? Go to the official source of the software? It's not like Google or Apple repositories aren't regularly packed with malware pretending to be something they're not...