This seems to make downloading scripts safer when encryption isn't supported by the server. Is that true, or am I way off base?

(For those reading who are incredulous that a reasonable person would ask you to download an installation script over unencrypted HTTP, you are right to be incredulous. Even some large-ish companies do it. It's insane.)