Be careful with AUR. You're essentially running a bash script you found on the internet. At least check if the package is made by the dev, and not some random dude. If it's not, definitely check how the package is built, and check every diff.
Niche software is especially dangerous, as there aren't that many people looking into the build process.
In my years of maining arch, I've only had at most 3-4 AUR packages installed at a time. And I've used it for stuff like Skype and Dropbox, which I'll try moving to flatpak.
I'm currently experimenting with guix. It's a bit insane, but pretty amazing.