Well, I simply disagree with you that it's a "bad practice", and I have a fair amount of security experience. But you're entitled to your opinion.

You can also build from source if you prefer: https://docs.plandex.ai/install/#build-from-source