rom flashing – Risk of Custom Rom OnePlus 7 Pro

I am having trouble finding any information on this. I have a OnePlus 7 Pro that I need to run MSM on to remove the Sprint carrier so that I can use it on Verizon. However, this MSM tool and the ops file are just some random files that I got off a Mediafire link that “say” they are the stock images from OnePlus. They could be anything, however, tons of people have said they use this and there are plenty of forums and Reddit groups. Is there a possibility that I could have my bank details/ Google account stolen once I use them on this device? How do people vet this stuff?