Arch Linux and (the lack of) package signing

I fully agree with what you said. I know nothing about this first-hand, and have never even tried Arch Linux. I just saw McGee's post on reddit and thought it might be worthwhile to link to it here. It definitely expressed a different view on things.

The truth is probably somewhere in the middle.