Follow-up to a post I made a while ago: those who use forks of forks/lesser-known distros: do you trust their update repos?

Yet another reason I try to stay with “mainstream” Linux is because of the update repos some forks use. For me, putting all of your trust into a repository with little known about it, or its security, makes me feel uneasy. I feel that it is a security risk, mainly because you’re allowing arbitrary code to be downloaded and run on your machine. You might argue that since it’s open-source people are constantly auditing, which has some merit to it, but with these lesser known repos there are bound to be less people reviewing code, and more opportunities for bad actors. What do you think?

https://redd.it/1tfby7v
@r_linux