Has anyone actually been hacked by a curl|bash installer because of the curl-bash-iness of it (and not a theoretical PoC--I'm well aware of those blog posts)?