Doing a pip install actually runs the setup.py of the package for source dist, which means running an executable. It's not the case for wheels though, so you c

Doing a pip install actually runs the setup.py of the package for source dist, which means running an executable. It's not the case for wheels though, so you can protect yourself by restricting to binary : --only-binary. Also doing a pip download is not sensible to this issue, but most people do pip install