Checking that the software is being downloaded from the official vendor's website is correct because official websites are more likely to provide genuine, malware-free software. This practice reduces the risk of downloading malicious or counterfeit applications that can compromise a system's security. Downloading software from a pop-up advertisement or a link sent via email increases the risk of obtaining software from an untrusted or potentially harmful source, which can lead to security breaches.