It's a pretty common practice, I think I borrowed the idea from nvm, bun, and other things

Even more stuff just adds apt repos to the keyring which is worse imo.

This way you can view the code in browser and see it runs from GitHub.

We did recently drop the sudo requirement for user space isolation.

It's really meant for quick lean VPSs or old laptops nodes without the docker bloat.

If someone has a critical system and isnt cloning from GitHub manually they got bigger issues.