There are multiple levels of trust. Do I trust the author to not put exploits in my face? Do I trust them to administer their own server in a way that won't lea

There are multiple levels of trust. Do I trust the author to not put exploits in my face? Do I trust them to administer their own server in a way that won't leave users open to hackers? Do I trust them to not put in some underhanded backdoor in a spot where they know I won't be looking? Generally, piping random scripts into a shell is awful, even if you vaguely trust the author of the thing you think you're getting. There are multiple ways you can end up with unexpected evil code on your system that way, with or without the project itself being involved.