How does the snap store have worse moderation than flathub when the snap store has the weight of a company behind it and flathub is run by [nervously notices it doesn't say]?
Agreed. There has been cases of malware sneaking its way into the AUR.
Now it could be avoided by checking PKGBUILDs and I can trust that the reader is checking those (are you, reader? 🤨). But do you have that trust for every user?
I prefer Void Linux's way of handling packages, where it all goes through one ultimately trusted git repo that gets packaged up if the license allows it, otherwise using xbps-src. If it was a bit less DIY compared to Arch I'd be hopping onto it tbh.
Some guy lost a good chunk of his crypto bullshit because there was a scam wallet on the Snap Store. I believe Popey did an audit of it and called it to the attention of the admins who removed it. It came back.