Pretty sure it has changed since then. At least, I used to make the same complaint as you, and a friend who uses Arch recently told me what I'm saying is way ou

Pretty sure it has changed since then. At least, I used to make the same complaint as you, and a friend who uses Arch recently told me what I'm saying is way out of date. https://wiki.archlinux.org/index.php/Pacman/Package_signing https://wiki.archlinux.org/index.php/Pacman/Package_signing