Not even then. The Server can detect if you pipe to a shell or just download the script: https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-b...

“Don’t ever” is a statement that depends on your threat model.

The vast majority of users would trust Homebrew (for example) to not do something like that.

Thanks for that. (Now I hate bash slightly more than I hated it already.)

You might want to have a look at Weex, aka "vue native": https://weex.incubator.apache.org/

Also nativescript: https://www.nativescript.org/blog/a-new-vue-for-nativescript

Ansible is much easier to get into. The more complex your requirements are (complexity of your infrastructure, services, etc) the less useful it becomes IMHO. SaltStack feels much more feature-complete and much more powerful to me. Also Ansible has no dependency-graph which sometimes makes it hard to modularize your "plays". On the other hand, SaltStack needs to be setup on the minions first, whereas with Ansible you only need SSH. I myself now use Ansible to bootstrap SaltStack and let SaltStack do the heavy lifting.