How do they know they’ve found the legitimate Ring Racers download and not some scammer who managed to get their search result above the real one?

Nothing wrong with downloading and running programs you trust, but there needs to be a good answer to that question.