People who click on random junk come to regret it. News at 11. :)
I've got gentoo linux on my computers, so nearly everything I run was compiled, by me, from source files I can read (though I hardly ever do). Everything else -- games, ripping software, etc -- I run either on a restricted account or in firejail. Yes, I even run godot in firejail (despite having compiled it myself), because I run other people's projects in it, and you never know.
Oddly enough, I've never had a malware problem.
I won't bother with discord until it's free (as in freedom), but that's an ethical issue. You can host malware almost anywhere. And you don't even want to know how easy it is to put malware on cell phones.