Comment by lossyalgo

You would rather trust a package installer and/or binary executable that might inject malware like a keyboard logger, bitcoin miner, back orifice, etc?