As long as they know how to avoid the spam then it should be ok. If they are a non-experienced user, then it is risky. They need to learn which are the good & bad files & how to recognise them.

Having a full kit of security programs with up to date definitions is recommended. Scan each file after downloading.