Never have files you download automatically open.

There are no “safe” files.

What if you accidentally download something? What if something is force downloaded on you?

When the file opens, that’s when the attack comes out.

Manually opening files helps add a layer of security. You can control this from your browser preferences.