It's simple: Don't use the AUR to download anything if you're worried. AUR is like COPR.
In comparison, Arch official repos only have 15k packages (~10k apps). There are ways to plug the gap (such as compile missing packages, add Nix package manager), but it's even better if you don't have to.