Comment by raxxorraxor

Both is completely secure theoretically. You can read the output of the curl before you refetch and pipe it to bash. You can also look at the commands claude is executing.

You always do that, right? ...right?