Yeah but I think there's a line between trusting a local app and trusting a remote install script