All the install hooks are run chrooted inside the pacman install directory. But, yeah, they run as root, so they could still do something nasty at install time

All the install hooks are run chrooted inside the pacman install directory. But, yeah, they run as root, so they could still do something nasty at install time. Not when you `makepkg` the PKGBUILD, though.