I feel like you missed the point of what I wrote. Yes, there are things people could do where if the site owner is malicious they could get screwed. That is gen

I feel like you missed the point of what I wrote. Yes, there are things people could do where if the site owner is malicious they could get screwed. That is generally what happens when you install software from untrustworthy sources. > > However, the point is that if you can't trust the publisher it doesn't make any difference what the installation procedure is. > That's not correct. A MitM attack is a risk even if the publisher is trustworthy. You're contradicting something that I didn't write.