A Privacy-First Checklist for Opening Unfamiliar Files Online (2026)