Yeah, but you just need anyone who bought the game on Steam, a friend or co-worker for example, not some shady website.

You want to avoid shady websites for the game download, and shady websites for the crack download. You can do both of this with Steam