there is one more thing - unless you are using something like chaotic aur, or a very popular package, please pay attention to PKGBUILDS. These are essentially bash scripts which can (depending on your package manager) will run with highest permissions. They can do anything