But why tho?
I keep getting told that Arch only looks like a goddamn incoherent mess because to install anything beyond the core packages that a coherent small distribution like Alpine or Tiny Core Linux distributes requires using the AUR and either trusting other people or performing a security review of every single build script.
But in organized Linux distros, there is a centralized build infrastructure and there is a centralized team that makes sure it's secure. It sounds like this isn't the case. Does this mean that for Arch, package maintainers just build random binary packages and maybe get them cosigned by other Arch maintainers (just based on 'reputation', without those other maintainers actually doing any verification of source->binary compilation consistency)? That's, uh, interesting *, if so.
* as in, I can only imagine the only reason the majority of Arch maintainers wouldn't be employed by the MSS, GRU, or SVR is that they couldn't imagine anyone would organize things in such a fashion