It seems that the installation script does not validate the SSL certificate. The comment is that executing scripts downloaded from the internet as root is a bad idea, and not validating the SSL certificate when doing so is awful.