@JoeBecomeTheSun, since time I use SMplayer instead, but generally I use only OpenSource apps (like VLC) but in this case I look first where are the source (GitHub, GitLab, maybe Sourceforge) and downloading from there or from the homepage. This generally evite surprises. I also check the downloads before I use or install these.
I always be carefull since in my first experiences on the Internet, innocent and ignorant more than a quarter of a century ago, I learned to type at 200 keystrokes per minute, while a Virus completely crushed my system. An experience that I do not like to repeat and I have had my OS clean since then.
The Internet is a jungle and you shouldn't even trust your own shadow. Check everything before you use it.