Why does nobody act like it is then? I don't use Arch but every Arch user talks about the Aur so matter-of-factly yet nobody treats it with the caution that it demands.
My favorite Aur helper (pikaur) also asked you to check the PKGBUILD on every install or update, back when I used Arch.
As far as Arch goes, I wonder if Arch-based CachyOS is a factor as it's seen the high performance desktop linux.