Comment by VladVladikoff

>You have to review the source of every PKGBUILD from the AUR you install, full stop

Believing that even a small fraction of users actually do this is deeply detached from reality.