Linux packages mirrors

Bonjour all! I am very new to all this and cannot select between Mint and Zorin OS. But I am here to ask, is it safe to use repositories mirrors like Mirrors - Linux Mint or Official download mirrors - Zorin OS for faster download speeds? Because it looks like they’re not hosted by official developers. Is it possible that I will get hacked because of such repo? Cannot mirror owner put malware? Also, some of them listed as http! Is it even normal? Isn’t HTTP, like, vulnerable? Or I am looking wrong way?