Yeah, for now this was only occurred within the user repository of arch linux. In fact it is the same with the PPA-repositories from Ubuntu, which can be also used in Trisquel. Therefore the official repositories in Hyperbola are not in danger and when using inofficial packages you should always build them by yourself, not using anything else then pacman and makepkg.
At last based on quote from Mr. Robot: "Control is an illusion." Meaning that the best way is being aware of what we are using / doing and from which sources software is built or loaded!
Human being in favor with clear principles and so also for freedom in soft- and hardware!
Certainly anyone who has the power to make you believe absurdities has the power to make you commit injustices: For a life of every being full with peace and kindness, including diversity and freedom. Capitalism is destroying our minds, the planet itself and the universe in the end!