Pretty much this. If you have to use something that is in AUR use something like Chaotic AUR. They seem to have security a bit more up to snuff. Still the whole situation is being handled pretty poorly.I just wouldn't install anything from AUR at this point.

