there's a lot of justified criticism on curl | sudo bash but honestly tho, how many people do check AUR packages or PPAs
someone could put malware in it and people would run it for probably months unnoticed
@CobaltVelvet just make a PPA that calls home and see how many hits you get :p