When engaging in criminal activity, you have no "legal" recourse for malicious behavior, so you work on the web of trust instead.
If you can't trust the software, nor the publisher, nor the hash verified by however many seeders, then don't download it in the first place. Me personally, considering I install indie porn games on the regular and never once gotten a virus that I know of, I think it's worth it to trust others.
Of course you could always go into paranoid zero trust mode but sometimes being a social being means trusting the criminal serving you free shit isn't ratfucking your data
Clearnet shall become brainfucked by states and corporations if'n it already hasn't been, and OpenNIC and Dark Web pirates will reign supreme. Remember, this stuff only really affects public trackers and "cable pirates," not sophisticated private tracker communities or anything else
Fucking finally holy shit! Fuck the Moonies, fuck the LDP, and especially fuck Abe-san for being such a fascist. May his spirit wander Tokyo restlessly forever
Dual licensure is the obvious solution. Have a strong copyleft license as default (Sorry MIT!) and then have a non-transferrable commercial license for proprietary businesses.
Corporations would prefer to take away your right to public utilities than face a loss to their profit margin.