[pjmlp]

Because even with HTTPS that script might not do what you expect and then is too late, xz style attack.

[kibwen]

You're already installing a binary, the script is not the weak link here.

[pjmlp]

Depends, installing binaries on GNU/Linux usually assumes validated distro repos.