Can a "regular" installer do all of that? Especially if it asks to escalate its privileges?

"Running a software installer" in general seems just as insecure as "sudo | curl" whatever.