It depends. There are trusted well known packages and those can be trusted in my opinion. But I wouldn’t install any random package someone made.

And how would moving the packages into official repo solve anything? The reason it’s in the AUR is because the arch maintainers don’t have time to maintain packages.