> But the code is open and the install.sh is as minimal as it gets tbh.

I bet 99.9999% of users do not review the code nor the install script.