Yeah, that's a terrible habit to get into and there really should be a better way of doing that. Technically it's no different than downloading and running an

Yeah, that's a terrible habit to get into and there really should be a better way of doing that. Technically it's no different than downloading and running an unsigned installer, you're just executing arbitrary code anyway. I think the concern is these are a lot easier to intercept and hijack. Maybe lobbying people to produce a first-class installer that's code-signed would help, but I'm not sure the open-source world wants that to become common.