Honestly, and this is a place i disagree with the Arch guys with, i think a helper like yay is better for AUR operations than their procedure. Yay (and some others) can show you the PKGBUILD as part of the process. In fact, i wouldn’t be opposed to that being the default or even mandatory. The Arch procedure says to always look at that file, but come on, I’m sure lots of people skip that step, especially for AUR packages we know well. Might not be right or proper but I’m sure plenty of us do it. The step can be imposed with a correctly configured helper (and if the user turns that off it’s on the user).
Maybe Pacseek is the “right” answer.