Like others have said, any file can be dangerous. You need to be diligent in picking where your ROMs come from, if it's a sketchy site don't use it.

That being said I've been doing similar activities since I was like 12 years old and have got a virus exactly once, and it was completely my fault for not listening to my gut (disregarded some red flags because I really wanted something to work.)