It is dangerous... but how often do people verify gpg signatures or less secure yet, sha1 hashes of the download tarballs? The curl piped into a shell is a bit

It is dangerous... but how often do people verify gpg signatures or less secure yet, sha1 hashes of the download tarballs? The curl piped into a shell is a bit tooo close to the edge for me.