uvx isn't more risky than `pip install`, which is what I used before.