Being careful with curl and piping gists and whatnot into bash

Training user to blindly trust when such events might happen?

No easy solutions, sure.
Maybe signed archives can help to get some distance behind us?
A question of trust and corollarily being trustworthy.
And nobody knows everything. Not users nor engineers, especially so when still somewhat inexperienced.