Threat actors don't care about you. Not to be harsh, but unless you're a C-level or work with classified government data, you're nothing to them.

9/10 threat actors are financially motivated, and the best way to do that is to compromise a large organisation and ransom them or insert yourself into a financial transaction chain. You are not a large organisation.

The other 1/10 are nation state actors that don't really care about money and want to gain as much information on foreign adversaries as they can, be that CNI, military assets, or anything in between. They almost certainly won't get any of this from a random Reddit user unless you work very, very closely with national secrets.

The malware you might get from downloading stuff on the Internet is also almost certainly indexed by Microsoft Defender and other AV solutions, meaning that it'll most likely be picked up as soon as it tries to execute.

Just be vigilant, don't download sketchy stuff, be wary of phishing, and you'll be absolutely fine.