Comment by GICodeWarrior

Further, security of a marketing site tends to be lower priority than the product itself, and an install script should generally be secured similar to the product.