anyways … the problem isn’t with Arch itself, it’s users randomly dipping into AUR thinking that the same level of safety checks that apply to the official repository also apply to the user repository – if you stick with the official repository or doublecheck an AUR package before running some random script off StackExchange, you’ll be fine
and if you want Arch with a little more polish, start off with EndeavourOS to get your feet wet and decide if you want to move to a pure Arch system at that point …