My usual comment shilling for xmake in any build system conversation, that's how much I like it : https://xmake.io/#/
It's in the official Fedora and Arch repos and there is ppa for Ubuntu
You can always just curl, inspect the script, shell it.
Personally I always use AUR wrappers since I hate having programs installed outside of packages.
The reason why a vocal subcommunity gets hung up on “curl | sh” is that they aren’t comfortable accepting the degree of trust which they’re placing in so many third parties but haven’t fully accepted the implications. Saying “download the file and open it manually” is basically the same as the TSA making you throw out a water bottle – it feels like diligence even though it’s pointless.
This is why most security people are focused on things like pervasive sandboxing to contain the damage when someone makes a mistake, code-signing and revocation, and trusted third-party providers (e.g. a Linux distribution or App Store) which are more trustworthy and can possibly do things like audit every binary they ship.