Compiling and running random git projects isn't that big of a step up.

You're totally right, it's just as bad, maybe even worse because build tools sometimes ask for admin permissions. People should ideally really on some kind of reputation system or get software from trusted vendors.

Like a package manager with maintainers, ie. Deb, RPM, etc.

You probably don't run curl | sudo bash either but other people have different threat models.

I do sometimes, when the source is trustworthy.