For example I don't think I can give you a trust to binary packages, like in this case:
https://aur.archlinux.org/packages/cudatext-gtk2-bin
Even if they are not containing anything malicious at this moment, it can happen at any time later, especially after gaining a trust of significant amount of devs. And even with your best intentions I can clearly see a scenario where it will happen against your will or even without your knowledge. You know - it is different thing to trust you, and different thing to trust your state...
Anyway, hope this whole war madness (or "special operation" as you're allowed to call it) will end soon.