For pros with budget, supporting developers via licenses is obviously the ethical path. But as a , CGPeers is unmatched.

Use a VPN, enable forced encryption in your torrent client, and always scan downloaded executables with VirusTotal.