According to MS there are various validation steps when app is added to repository, including virus checks:

Each submission to the Windows Package Manager Repository is run through several antivirus programs. These programs all have different virus detection algorithms for identifying potentially unwanted applications (PUA) and malware.

https://learn.microsoft.com/en-us/windows/package-manager/package/repository#validation-process

So I guess it’s safer to install apps trough winget, at least as much as much You trust Microslop doing good job.

Can’t really say for VM installation, but I was able to install it to “login to terminal” stage on Dell XPS 15, that was 14-15 years ago and my knowledge about Linux terminal was rather limited to basic commands only (mainly those shared with DOS/PowerShell). Just give it a go, stick to instructions and it should be fine.

This time it surely will work!

Like 5 years too late for me, I ditched Winslop bit over 4 years ago, never looked back. Yes, it’s not perfect, not everything works out of the box and I have to search for solutions every now and then but it’s My Computer again.