To check whether or not the link is legitimate takes about 5 seconds. As long as you do that there's no security risk involved by downloading and installing the IPSW. I'm pretty sure Apple doesn't need you to talk on their behalf about their Terms of Service.
I downloaded direct from apple servers with the inks provided in the reddit entry, then I tried installing for my XS but ITunes Says the file is damaged. Anyone with the same issue?