No you don’t. You can download the executable and check the pgp signature with the verification section, on the download page

Bisq.network/downloads