I'm kinda eh on the AUR rn, but I might go for it again if I use Arch, given that Flatpak still needs verification very similarly to the AUR. Meanwhile my friend doesn't bother to check the PKGBUILDS at all. 🥴