I never use dubious sources like this, especially banking apps.
Oh yeah, it's usually a very bad idea, especially regarding apps handling sensitive information. Since my use case for APKMirror strictly consists of apps without internet permission in a dedicated, otherwise empty profile, the risk is acceptable.