Download directly from the official source, scan the ISO with antivirus (though the official one is clean), and keep the USB in a safe place for emergency system recovery.