I suspect they provide a far more consistent attack surface for exploitation. One that likely won't change for many months in the case of some proprietary vendors.

So no. I don't, but that doesn't make curlbash good either.