I think the reference is to the fact that on Windows you download some random .exe installer from some place on the internet and trust it, rather than selecting

I think the reference is to the fact that on Windows you download some random .exe installer from some place on the internet and trust it, rather than selecting a signed package from a trusted repository that gets automatically updated. Should have been "download it, drag it to your desktop, and install it".