The installation shortcut given is curl -sSL https://install.pi-hole.net | bash and one is expected to execute this as root. Yes, I know this is supposed to be a convenience thing, but I wish people wouldn't actively encourage this pattern.
from the article: > Our code is completely open, but piping to bash can be dangerous. For a safer install, review the code and then run the installer locally.
That way, it is the same as running cURL without piping the output to bash, so people can easily check the code without worrying if the server is sending them different code when they pipe to bash