Comment by sd1010

Arch itself is just a collection of user-produced PKGBUILDs. It's provided without warranty (like any GPL code).

The difference is that Arch got a trusted reputation throughout the years, while in AUR even the packages that also have a reputation can suddenly change their owner - which produced the current issue.