ah I see, the greater risk of mitm attack due the script not being hosted by a package manager, fair enough.