If I’m understanding it correct, 4.0 had some fundamental differences in terms of code structure, i.e. not everything is downward compatible.

For me 4.0 candidate works just fine to be honest :)

Rule of thumb I learned and never validated:

Two it starts, with three it can become an issue, with four it might affect the underlying permanent teeth - and there is no difference between thumb or pacifier.

4.0 is the next big version that’ll come … Whenever.

VLC has no big corporate sponsor behind them and are notorious for being thorough but slow - i.e. what they released in the past was top notch but it took them six years to go from 2.0 to 3.0.

Frankly: No. That’s why what you’re doing is so important m: secure it locally. EVERY source, especially the pirating ones, can come under attack.

And that doesn’t even have to be someone evil directly, just someone spreading stuff. Endpoint security (i.em your computer) is the key.

You’re mixing two things:

First, you’re right this file I personally would not trust and keep quarantined.

I don’t know Malwarebytes but Windows Defender back in the day only would get active on files you or your system interacted with -> would make sense that you only get one alarm. In addition, windows was notoriously bad with multiple virus scanners as they themselves show infection patterns in their behavior,(who else than a virus and a scanner wants to access literally everything you do?). So: i would err on the side of caution.

But then there’s the question about the source. And here I can only ask you to be more careful: never trust a source more than your own defense layers. Even the most reputable file sources will have things that will harm you - including the Microsoft Windows updates themselves by the way.

But here it’s more critical: don’t trust pirate sites. Ever. No matter how good their reputation.

Oh and yadda yadda Linux blah but someone else will give that talk I assume ;)

Stay safe!