Comment by lye

They're not more "random" than developers of a lot of software you run. Package quality tends to be pretty good, I've only seen doubtful things once or twice in about a decade, and nothing malicious. Definitely haven't seen anything like the famous `rm -rf /*` in the official non-"random" nvidia package that was prepared and then shat into the world by nvidia's non-"random" developers.