I can't seem to find too much on this, but I'm worried after realizing I downloaded my Raspbian image from HTTP, and wrote it into a USB stick without verification.
I'm worried, especially since I don't trust the security of my family's router (though their modem seems to be fine, it's new and a recent Xfinity modem with maybe a custom password, maybe not on second thought, but still, at least it's recent) so I'm worried a remotely-accessing-the-router MITM attack could ruin my file.
And, after all that, I'm worried it'll infect my computer as it needs root permissions to write the .iso to a drive via Etcher. Etcher is Electron-based, so it might have some sandboxing, but I'm not sure. I'm not sure, but at the same time, it's just only copying and extracting the file and partition structure to a USB stick, not reading anything as far as I know, so I'm not sure.