And if you got infected with something, just read the arch wiki. It will cure you.

Yeah, that whole unverified developer build installation was always very risky. It's a real shame that so many distros fail to keep up with recent packaging, and that so many development environments have super lax policies on who can post a package to their repositories.

You are absolutely right, and it's a shame that especially large corporations use open source without giving much back.

Still, the setup of a lot of software repositories and package management is almost comically lax. A little extra effort might do a lot of good, is all I am saying.

Awww <3