@marcan (Not disagreeing, at all.) This isn’t a problem in your case since the Asahi download script has a truncation guard, but the main issue with curl|sh in many projects is that a partially downloaded script can still be executed, sometimes with no indication that something is missing. To be clear, that’s *not* an authentication problem, it’s a user experience problem.