how is this any less secure than running a binary/installer? the binary could run this inside?