Fedora considers curl-minimal

The security argument is that the protocol implementations may have security vulnerabilities, not that the protocols themselves are not secure by design. FTP is insecure in that it is unencrypted and poorly authenticated, but it is not (necessarily) insecure in that it's easy to find an RCE in the code.