2025 and actual devs are still recommending to type "bash <(curl -L ...)" into a terminal...
If the source is known, it is not less bad that downloading a program and running it
It's just assumed you'll run it in an isolated container, or some other sandbox...
If the source is known, it is not less bad that downloading a program and running it