The point of linking to another comment (made by someone else who is more qualified to comment around 2 years ago) is to point out how people just aren't learni

The point of linking to another comment (made by someone else who is more qualified to comment around 2 years ago) is to point out how people just aren't learning. While it may seem like it's just a convenience, these things tend to take on a life of their own. For example, Chef's "pipe to bash" installer is used by Vagrant, thereby exposing anyone using Vagrant and Chef to make a dev VM on an untrusted network (any wifi!) to who knows what being installed. But unless you read the source, you don't know about this risk. Why does no one care about security?