Agree. Not at all a security expert here, but maybe doing it inside a distrobox could be a temporary fix?

Forget it, I just tried and it seems it gets installed in your home directory so using distrobox doesn't change anything (apparently, but as I said I'm not an expert so feel free to correct me if I'm wrong).

However, I've seen they also have it available through a bunch of package managers like nix, arch and Fedora