Counter-evidence: Repos such as AUR

That blast radius coupled with (non-Android) Linux's atrocious security is a far worse option