> A system where installation is done using "curl + sudo bash" is the opposite of a safe OS.

not clear at all. E.g. on QubesOS this could be fine