He was gaslighting her

Yep, I don’t like these “recommended” methods, too. Fortunately, you can just use your favourite package manager instead: https://docs.atuin.sh/guide/installation/#manual-installation

Shout out to the very fine Atuin.sh. Give it a try, you won’t regret it.

Red flags? Yeah don’t use “security Software” that just increases your attack surface. Why the fuck would you want to install a root kit on your critical infrastructure?