Earlier quoted context omitted.
In which way can it be exploited?
If I serve you a 2000 line unformatted bash script from an URL and tell you to pipe it to bash, will you do it? Should you do it? Do you have the mental fortitude to format it and go through it line by line looking for possible exploits? It's 100% trivial to have it run rm or shred on all files you have access to while simultaneously printing correct looking install progress messages.
> It's 100% trivial to have it run rm or shred on all files you have access to while simultaneously printing correct looking install progress messages.
The same is true of the tool itself, too.