I have written dew (https://github.com/efrecon/dew https://github.com/efrecon/dew) for more or less the same purpose. I hardly keep any binary (and dependency)

I have written dew (https://github.com/efrecon/dew https://github.com/efrecon/dew) for more or less the same purpose. I hardly keep any binary (and dependency) in my installation, they are all inside containers that I can easily dispose of at any time. The default in dew is to run them as your user. At the command prompt, instead of running, for example, kubectl xxx, I run dew kubectl xxx. It's a bit slower but provides an increased level of security.