Third-party sites often host ISOs packed with malware, rootkits, or cryptominers. A Microsoft-downloaded ISO is digitally signed and verified.