It's not meaningfully different than downloading software with an installer/install script and running it on your machine. Though obviously, you could just curl it, read it, and then bash it.
Like 95% of websites with JavaScript? :)
No, because JS runs in the browser sandbox and has no access to the rest of your machine. That's very different to running a bash script from curl.