At least with a compromised docker package any malware insude needs to break through the virtualisation layer. Not impossible but not considered trivial.

With the aur you are compiling and running arbitrary code at the OS admin level.

I am a fan of the aur but try and use it sparingly. It often causes more problems than it is worth. I hate to admit it but this recent issue has made me reconsider the value of flatpak....