So? Nothing different that downloading an opaque binary and executing them -- which we do all the time.

It's all about trust.

When you run:

apt-get install foo

is it any different? You download a file that essentially runs anything pre- and post- install of the rpm.