Arch itself is just a collection of user-produced PKGBUILDs. It's provided without warranty (like any GPL code). The difference is that Arch got a trusted repu

Arch itself is just a collection of user-produced PKGBUILDs. It's provided without warranty (like any GPL code). The difference is that Arch got a trusted reputation throughout the years, while in AUR even the packages that also have a reputation can suddenly change their owner - which produced the current issue.