What could someone do with a curl pipe that they couldn’t do with a signed, obfuscated executable?