The issue would propose implementing checksum verification for the Homebrew installation script in macos/utils/bootstrap.sh
to prevent execution of potentially tampered scripts.
This would include options for downloading to a temp file with verification, using signed installation methods, or pinning to specific commit hashes.