The question is, is it easier to place your code on that curl site. If there is some web-layer vulnerability, you can put your own code there. With signed MSIs

The question is, is it easier to place your code on that curl site. If there is some web-layer vulnerability, you can put your own code there. With signed MSIs and EXEs, you'd need to get your code signed, which is probably more difficult than the web layer.