> command that really just downloads arbitrary code you are going to execute immediately afterwards anyways? By default it directly runs code as part of the do

> command that really just downloads arbitrary code you are going to execute immediately afterwards anyways? By default it directly runs code as part of the download. By isolation there is at least a chance to do some form of review/inspection