Apple, Microsoft, Google, Steam, Arch Linux, NixOS, Flathub, etc. all end up publishing malicious software in their stores and package managers. It is inevitable. If you're not worried about sandboxing then you might as well proxy all your traffic using third party software.