>getting this thing called "libcap2-bin" (again, no idea what that is, could be installing a botnet for all i know)
If you get it via a package manager (like apt or dnf), it's almost guaranteed to not be malware unless some nation-actor is out to get you.
Funnily enough, this is something that Windows never solved (store is garbage and incomplete, winget is powerless and incomplete) and remains a prime vector for malware after all these years, despite a bunch of bandaids that are ultimately useless.
winget seems like a minimum effort to say they have something that seems like a package manager, from what I can tell it's a big index that either hooks into the msstore, or points to a regular installer with a version number that usually runs in silent mode.
Packaging like linux has had for decades would seem like a huge uplift for windows if they could do it, especially if it could be done with modern approaches to isolation.
If you get it via a package manager (like apt or dnf), it's almost guaranteed to not be malware unless some nation-actor is out to get you.
Funnily enough, this is something that Windows never solved (store is garbage and incomplete, winget is powerless and incomplete) and remains a prime vector for malware after all these years, despite a bunch of bandaids that are ultimately useless.