I tried arch and got rid of it after a couple months because of the aur. Do people just not check out what they're installing? Every time I wanted a new software i'd have to check it out to make sure it was legit, and every time I updated i'd have to check the diffs to make sure it was still legit. Otherwise, who knows what you're actually installing.