Coders are rejecting curated repositories for the publishing of software, citing too much work and effort and too slow. So, there is a growing appetite for the filthy practice of hosting code in unofficial places. And people download it. Then, malware.
To be honest, although the aur source brings some risks, and the update speed of the Arch software source is radical enough, there are still some software that have not been included in the software source.