How is this different from any situation outside of the web? '
Outside of the web you're trusting your repo and that's it.
Also you actively decide to install a program or not, quite unlike browsing the web where dozens of scripts from completely unknown and untrusted sites are executed on your computer.

Reply via email to