Unless you're installing from a package manager with signed packages everything is going to suck by comparison. What exactly is the alternative the author woul

Unless you're installing from a package manager with signed packages everything is going to suck by comparison. What exactly is the alternative the author would suggest? Git checkout? Couldn't you paste-jack that too? If the instructions come from a webpage, aren't they all basically paste-jackable? What is the specific issue with using this method?