How would you folks make sure your system is not compromised? That's my No. 1 concern about my system. Like OP, I'm using my arch for many years now, however I

How would you folks make sure your system is not compromised? That's my No. 1 concern about my system. Like OP, I'm using my arch for many years now, however I cannot tell whether it's running vanilla arch or not. Unlike NixOS I cannot verify the changes to the state of my system over time and I haven't kept a log of any software installed or any config changes. That's why I plan to replace it and keep a log of future changes.