Hi! Your comment is very vague and damning considering it contains no specifics.

The gist is served over https so that's secure. It's well documented so it's not really doing anything unintended so there's no problems there. It requires admin privileges, but so would similar changes in other operating systems.

How specifically is the gist full of insecure shit?

I mean insecure configurations, like turning off automatic updates. For instance, unconditionally marking current network as private.

It turns off Automatic reboots, not Automatic updates.