Any media can contain exploits, for the most part if you stick to reputable uploaders you should do alright but it’s essentially an unavoidable problem. Keep your media player up to date
Squadron 42 has been the primary development focus, star citizen is just the playground made by a few devs with left over sq42 modules - until sq42 launches then star citizen will be the main development focus. Until then, star citizen is just a fundraising platform, I thought this was obvious