Comment by ffsm8

at that point, i'd put bash script up as being moderately more secure as its generally easier to audit them vs a binary.

but i'Ve also gotta say that random binary download over web is also incredibly rare - usually its either a combination of both (the curl|bash ending in a random binary being downloaded) or the user actually installing via a packagemanager like apt, zypper, yum, dnf etc - and those packagemanagers generally do audit the main repositories, so theyre basically as secure as you can get in those contexts.

but of course, everyone has their own thread model and i dont work in security (●'◡'●)