Yet another less why installation by "download and run a bash script" isn't a very good idea

https://discuss.hashicorp.com/t/hcsec-2021-12-codecov-security-event-and-hashicorp-gpg-key-exposure/23512