Pirates vet things with lists of clean sites/trackers/tools etc. As long as pirates stick to those, they generally don’t have to worry about malware. Such a list is not difficult to find.

Sure, it’s possible for someone to get caught out by one of these sites or users deciding to turn bad, but that’s only going to work for like a day. It’s like kicking a hornet’s nest in the pirating world.