Once you have the ISO file:
Download only from The Internet Archive with verified checksums, scan everything, and install offline (disconnect your internet cable until you have installed a third-party firewall). Once you have the ISO file: Download only