Yes, but what's the value in this website having a dedicated application that I either have to trust blindly or evaluate and compile?

We already have this great sandboxed environment called a browser for running untrusted code from the internet. They could still offer endpoints for curl, if it's just about using the command line.