I like the response[1] to that issue by Kenton Varda on the sandstorm team. I think it&#x27;s a well thought out piece.<p>[1] <a href="https:&#x2F;&#x2F;sandstorm.io&#x2F;news&#x2F;2015-09-24-is-curl-bash-insecure-pgp-verified-install" rel="nofollow">https:&#x2F;&#x2F;sandstorm.io&#x2F;news&#x2F;2015-09-24-is-curl-bash-insecure-p...</a><p>He addresses code signing and mitm and connection interruptions.<p>Edit: The gist of it is no, it&#x27;s not more insecure than other software distribution methods.