Not to victim-blame here, but the fact that there's even an "installer" should be a huge red flag. There's no reason a simple FTP program can't be just an .app bundle.