> people agitate against `curl blah.xyz | sh` for a reason. What’s the reason, exactly? If you’re principled about only ever installing anything from vetted r

> people agitate against `curl blah.xyz | sh` for a reason. What’s the reason, exactly? If you’re principled about only ever installing anything from vetted repos, then sure, your position is at least consistent. But my experience is that people who are appalled by pipe-to-sh are for whatever reason much less appalled by downloading random binaries or .deb files from blah.xyz and running them manually, which seems like just a more labor-intensive version of the same thing.