The recent AUR situation demonstrates quite critically Arch Linux's failures to properly plan and defend against larger more sophisticated attacks.
Despite warning people for years about this kind of attack, they don't actually seem to have had any tangible protocols in place.
