I think the point is that when a repo contains:

  program.bin
  install.sh

It seems rather pointless for me to thoroughly inspect the install script before I run the program.