~swapgs on Nostr: I don’t see this as a counter-argument against curl|bash—if you’re pulling a ...

I don’t see this as a counter-argument against curl|bash—if you’re pulling a malicious project or from a compromised backend, it’s already game over anyway? It’s no different from pulling a random software dependency from whatever registry your ecosystem offers.