[xiii1408]

Hahahahaha yes that's exactly what Manjaro is.

And, sure, it's not Debian or CentOS, so you don't have as much attention focused on the packages. Their record of keeping malware out is pretty solid, though, as far as we know.

I think a lot of security has to do with simplicity: if you don't understand how your software is configured, you're likely to open up a security hole on your system.

Arch's "don't start doing stuff until the user tells you" posture does a good job of making sure the user is aware of what's running on her system. Contrast this to Debian, which will often start running random services as soon as you install a package (e.g. Apache).