Wow, this is effectively the end of the AUR model. There's been a malicious package or two before, but an attack this widespread shows things are fundamentally broken. Guess I'll be switching to a new OS this weekend across multiple machines.
They lost me decades ago over the lack of auto incrementing PKs and having to cobble them together through a sequence and a trigger if I remember right. Seemed like utter nonsense. But I'll take your word that you got value out of the features you mentioned. The company side will forever prevent me from taking any of their products seriously though.