The issue is not the package manager, the issue is the repositories you're enabling. See https://iuscommunity.org/pages/TheSafeRepoInitiative.html for details.