The Dangers of Curl – Bash (2021)

Doesn’t improving the author’s MITM mitigation #2 so that you download the script and vet it locally — it not in the browser — kind of mitigate both the original problem and the author’s proof of concept attack?