Any chance for curl releases to be generated with a CI/CD process, where the exact commands are documented publicly AND are run on a system that's NOT your usual development system?
Example: htop:
https://github.com/htop-dev/htop/blob/main/.github/workflows/build_release.yml