The software has to be distributed somehow, right? Probably over https? What makes curl more susceptible to MITM than apt-get&#x2F;pip&#x2F;gem&#x2F;etc?<p>I don&#x27;t particularly like curl | sh either, but without sudo, I&#x27;m not sure how much it &#x2F;really&#x2F; differs, security wise, from  other options.<p>Edit: real package managers have improved features compared to curl, as outlined in another branch of the comments.