Mitigating the risk of downloading a script from the internet and executing it
-- even from a "trusted" website or package manager -- is absolutely a good reason not to use it.
I don't really get this whole defaults being a blocker for tools choice.