A webserver could alter the payload based on the client. An evil person could present a normal install script for other browsers and randomly present a malicio

A webserver could alter the payload based on the client. An evil person could present a normal install script for other browsers and randomly present a malicious one for curl clients. At least with the downloaded file, that is the thing you get.