How would he establish reputability? I trust rvm.io or brew.sh or whatever else as much (or even more) than I'd trust curl.sh, but there's always the risk that

How would he establish reputability? I trust rvm.io or brew.sh or whatever else as much (or even more) than I'd trust curl.sh, but there's always the risk that the site has been compromised by a third party, or there's a MITM attack.