Earlier quoted context omitted.
I'm a lifelong Windows user - I usually install software by downloading installers and double clicking them. Every so often HN rolls their eyes at all these idiots who do "curl | sh". How is doing so any different from downloading an installer over https and running it? Really, if installing software is what we're doing, isn't running it part of the objective? Or, in short, why is "curl | sh" frowned upon and why are…
An installer should be digitally signed, and Windows will flag unsigned installers and try to tell you it is questionable to run. You can also check that an installer isn't corrupted sfter downloading and before running, classically withe the md5 hash.
That's Windows. There's no such thing on linux.