Gregory's Server
@aks I don't see how something coming via package manager means it gets wider testing. It might, or might not, mean it gets a few more eyeballs, if it was packaged by a third party.
But we are shipping an OS. We *are* the package manager. If you don't trust us not to screw up then it doesn't matter how the download works.
@marcan Not critiquing how you do it, nor saying what i think is "correct", was more a feeling thing. :) Perceived security vs actual security.
I always read the script anyway, but more for the curiosity than for the verification. And i understand your usecase for it!