Comment This is validating my decision to stay on Debian (Score 4, Interesting) 50
I run Linux as a desktop and have done so since around 2008. I started with Ubuntu, and after a while (probably around 5-10 years) I moved to Debian. Every once in a while, I'll read about one of the new Arch-based distros (Manjaro, Calyx OS) and decide to give it a try. After about a few hours, I realize that some of the programs I use on a regular basis are not available (easily) outside of the AUR. When you read about the AUR as an intermediate user, you understand how dangerous it can be, but you feel like it's necessary to use Linux as your main computing device. There are applications that are packaged as DEB/RPM but not for Arch, and are not available as Flatpaks (or AppImages or Snaps). Some of these are proprietary.
One in particular which comes to mind is Insync, which I use to synchronize Google shared folders to my home directory. It is much easier to use than rclone and the latency is a lot lower. If I move to an Arch-based system, I have to get that from the AUR. Now, I do feel like I have the experience to read the PKGBUILD and audit it for weird stuff going on, but I'm also not arrogant enough to believe that someone could not sneak something by me.
I use Debian Stable, and all of my software is available. Some of the software is dated, obviously; I'm running KDE 6.3.6 and kernel 6.12. But in general, I don't have huge issues with that, and if there was an application I needed to update, I probably could do it either with Flatpaks or compiling from source. Honestly though, I cannot remember the last time I needed to do that. Maybe it helps that I'm not a professional software developer and I don't need access to the latest versions of everything. I also know that some Debian users address those issues by running testing or unstable.
There's a part of me that wonders if these attacks are related to the surge in popularity of Calyx OS. I teach high school, and I noticed last year that one of my ninth graders was running KDE on his laptop. I asked him what distro he was running, and he said Calyx OS. I was surprised by that - most of the time when I run into a high school kid they're running something in the Debian family (including Ubuntu and its derivatives).