It really should be shut down for Arch’s sake.
I think it should really be split into two parts:
- The more widely used packages should be moved to an official repository with review procedures. Perhaps the (quality) requirements can be lower, but these must be reviewed by trusted people.
- The remaining packages should be moved to user namespaces, like the other user-package repos do. That will at least prevent (most) takeover attacks.