If you don't trust the installation script to be non-maleware, why are you trusting the binary that the script installs? It's not as if the instructions would

If you don't trust the installation script to be non-maleware, why are you trusting the binary that the script installs? It's not as if the instructions would allow an attacker to pass you another binary, after all.