If there was a standard `curlbash <URL> <SHA256>` program that was installed everywhere it would allow to work around all of these issues.