

I think I’d be satisfied with just not allowing people to take over orphaned packages. That seems like a glaring attack vector and closing it would not harm the AUR in any way.
And yea, arch (and its derivatives) probably should not ship with AUR helpers pre installed.

Thanks for the clarification. I am relatively new to arch.