You're right. It's far safer to just download and run a binary you can't inspect than to execute a bash script you can inspect. Doubly so if there's a hash to guarantee the script/binary you downloaded is the one they intended. That means there aren't any nefarious things in it. ️

Alternately you could homebrew/apt-get some_package_ive_never_looked_at_the_source_of that'd be wicked safe.

</sarcasm>