@raphael @marcan I actually think yes, it's good for legitimate projects to legitimize curl|sh precisely because it has an unfairly maligned reputation and this is the way to fix that.