What others have said is valid as well, but joining a good private tracker means content is moderated so risc is very low.

VPN is only needed if you live somewhere where either ISPs or some organization sends letters.

There is also the Arr suite that basically allows you to build your own streaming service.

I haven’t used a live antivirus in more that a decade, by avoiding just raw dogging the open web I’ve never had a problem.