>Downloading a million random poorly maintained programs just increases your attack surface

I always thought this, Linux people love to boast about being security smartypants but they are all too eager to use Arch based system with public unvarified, "community" maintained repos and just run and install random dependencies without checking anything, - how is that any different from grandpa going on "coolsoftwarez.net" and downloading random stuff? To me its kind of the same thing.

The more stuff you have to keep track of, the more hassle it is, I just want to make things, ''maintaining a system'' isnt the reason i use a computer.