☝️ 💩 🔥🔥🔥

Depends on how much privacy you need and how much tinkering to get things to work that you’re willing to put up with.

In general, using a variety of services will be more private than going with a single entity like Proton.

Bitwarden is self-hostable, which makes it potentially more private than Protonpass… assuming you actually set up the self-hosting.

Signal isn’t a good long-term plan, as it’s entirely hosted in the US. I don’t think there are currently any known compromises to the encryption model, but iirc the company can see all your communications metadata (which means the government could potentially as well). I don’t mind it for talking with friends, but I would recommend against it for extreme privacy needs (e.g. the government starts getting overzealous with who it counts as enemies of the state, and you or your friends become targets).

At least some level of human review is going to be needed.

So… completely negating the point of a User Repository??? Introduce some kind of authoritative oversight, and it’s essentially just another regular repository, erasing all the benefits of the AUR. The whole point of the distro slapping a huge disclaimer of “DISCLAIMER: AUR packages are user produced content. Any use of the provided files is at your own risk.” at the top of the homepage is because these kind of compromises are the trade-off one makes