Agree.
Not at all a security expert here, but maybe doing it inside a distrobox could be a temporary fix?
Forget it, I just tried and it seems it gets installed in your home directory so using distrobox doesn’t change anything (apparently, but as I said I’m not an expert so feel free to correct me if I’m wrong).
However, I’ve seen they also have it available through a bunch of package managers like nix, arch and Fedora
Anyone willing to summarize those mistakes here, for those who can’t watch the video rn?