Really? If anything I have the opposite problem all the normal people I’m aware of probably don’t even need steam just the web browser and plasma. Pretty much everything is in the web browser these days I mean they might want the dedicated discord client but that’s ultimately just a web browser in a box and will also work perfectly no AUR required
I’m very tired of the rhetoric that Arch is only meant for tinkerers. If all you do is have plasma steam and a web browser it’s no more or less likely to break than any other distro. You could go your entire life without ever looking at the terminal.
And while yes this malware is a problem it is specifically in the aur, the arch user repository an unofficial repository not officially supported, just don’t use it. Unless you need a weird piece of software generally related to some type of specific hobby you’re unlikely to ever even want to look at it anyway.
I use them for email and I’m not moving anytime soon. Thankfully, 98% of my email, probably more like 99.9% if I’m being honest, is just worthless junk. I don’t care if they see it. I was self-hosting my email server for like eight years until Debian decided to just eviscerate itself one day on a system update for some reason. I gave up, moved to them, and I don’t have the time or the energy to move again.
I don’t use any of their other services. I have my own seafile for file storage. I have my own Wireguard on a VPS for VPN usage. Etc etc