It seems that the installation script does not validate the SSL certificate. The comment is that executing scripts downloaded from the internet as root is a bad idea, and not validating the SSL certificate when doing so is awful.
I would like to know what BackgroundHALShouldPause does, and how to use it. While it's listed in the HAL Primitives report, it is not used in source code and it doesn't appear in the LMS HAL...