I’m not sure how your machine is configured but mine has permission boundaries and security policies that make sure programs are behaving properly. I don’t run everything with my personal user context.
But really, there is no reason not to use prebuilt packages for distribution. Curlpiping needs to die.
If someone wants to be reckless they can be. If someone doesn't, they also have that ability.