Executing code from an unreliable source (which is financially incentivized to keylog you) is foolish.

I don’t run random unreviewed scripts with sudo either.

I hope you use non-sms 2fa for everything because you’re probably already keylogged.