The payload we received has one install.sh script containing an embedded/encoded binary (yea, believe it, such a 1990's hack). ¯\_(ツ)_/¯
It also came with three proper flat and signed packages, clearly from a group within McAfee that is more adept/capable, aligning with Apple's best practices for software distribution. #JustSaying
If you have a tool like Casper, its easy to set up a policy containing the four pieces, run in order. No reboot necessary.
Yes its one of the new feature in ENS Mac. You can install only one module by just passing command line parameter for the module you would like to install. For details refer to this KB 84772