> The curl | bash approach has only one upside: you can store the script, inspect it, then run. Not having to waste countless hours on whatever distro's packag

> The curl | bash approach has only one upside: you can store the script, inspect it, then run. Not having to waste countless hours on whatever distro's package format of choice is a pretty big upside. And those are also RCEs if you're not upstreaming the package (which you likely are not because that increases the amount of time needed by an order of magnitude) as most package managers have multiple scripting points which run arbitrary code, and usually run as root already.