I think the AUR isn't possible to keep using as-is so hopefully they come up with some sort of vetting process. Invite system like a private torrent tracker? Idk really.

I try not to use AUR. A few exceptions being the actual program developer maintaining the AUR repo and recommending that method for Arch users on their github page or whatever.