it takes a ton of work to package and upload a binary, and if you make it malicious it's right there in the dowwnload folder.

This is more like executing the current text of a web site (whatever that is) in a totally ephemeral way. That gives total plausible deniability to anyone who would serve you a particular version based on your IP, for example.... (or anything else). You're just not keeping the evidence.

I mean, you "could". But doing things this way, you're not...