The concerns are fair though, just added a --secure flag which will install popular modules only (>10k downloads last month)