First is an abundance of caution. I trust nothing, even from 'trusted' sources (ie e-mail). If someone sends me anything, I make sure they tell me separately what and why. And then, if it originated from a third party, I often refuse to open it. If I must, I often use an old spare computer...