Can't see what security it adds at all. The whole looks like a lot like enterprise-quality fizzbuzz, with the core being a small script essentially doing `curl | bash`, but much more verbosely - and a lot of boilerplate (tests, packaging etc.) around it.