Literally anything else.

Keep in mind that its possible to detect when someone is doing curl | bash and only send the malicious code when curl is being piped, to make it very hard to detect.

curl | tee foo.sh

and then inspect foo.sh and then (maybe) cat foo.sh | bash

Does that avoid the issue?