How do you securely do the review?

to be honest, i am scared of viruses ... Installing a additional Windows VM for exe? not running any Android apk? ...?

comments appreciated!