Hello. I purchased Cogs on the humble bundle and just tried it. Although i like the game itself (but boy does it have some nasty puzzles...) i have a lot of criticism regarding the installer it came on:
1: why an installer?! it's a mac app. it's self contained, all you need to do is either to provide it "zipped" or in a dmg file. after that it should just be drag and drop to the applications. Installer is unnecessary, dangerous (one can't usually see what an installer does) and prone to user problems
2: the installer fails. i don't understand why but it failed on me. every single time i tried it, it just failed without notice, on two macbooks. Again, this is an unnecessary feature that just complicates more the user experience. I never understood where, if anywhere, it dropped the application.
3: why the f*** does it require an admin password? this is what i find more dangerous, reckless and simply nonsense. a simple application drag and drop shouldn't require an admin password. that simple! and even in a installer, considering it just drops something in the app folder and i'm an admin user, it shouldn't either. I'm sorry but this is just bad&sloppy Mac practice from the the developer.
In the end i just ended looking inside the pkg file, found the archive.pax.gz, unizipped it, got the app file and just drag and dropped it in the app folder. the same thing it should have done since the beginning.
On the whole i must say i was very displeased and suspicious of this game installer. if i hadn't downloaded from the humble bundle page i would just never run the installer. And to be fair i just executed it because i used a quicklook plugin to check out the installer through first. A regular user wouldn't know how or why to do it. If some of my relatives to whom i give tech support asked me what to do with an installed like this i would just say "drop it in the trash". No second thoughts.
You should really just drop the installer and simply provide a dmg file. Clean, simple, "usual" and security risk free (as long as cogs itself is a safe app of course).