The gist is served over https so that's secure. It's well documented so it's not really doing anything unintended so there's no problems there. It requires admin privileges, but so would similar changes in other operating systems.

How specifically is the gist full of insecure shit?