Package management provides cryptographic attestation over the entire process, including the scripts run. Nothing is arbitrary nor mutable in the default state. The files touched will be in a predictable place and the scope of privilege escalation is clearly defined.

▲

BloondAndDoom 3 hours ago | parent | next [-]

But he’s not using a package, he’s downloading from gir repo and build which exactly same getting a bash script from the same repo and executing it.

▲

rusk 3 hours ago | parent [-]

It’s not. Try pulling updates after a rebase. Very much not the same as piping arbitrary disembodied text into your shell.

	▲	thecopy 2 hours ago \| parent [-]
		Except the first time you do it

▲

thecopy 3 hours ago | parent | prev [-]

>Nothing is arbitrary nor mutable in the default state.

What do you mean with this?