Are the packages in the repositories of arch also affected?
No? Then it's not a problem.
Every device in this household that isn't a smartphone runs on Arch.
All my servers run on Arch.
Never had a problem, because I don't blindly install stuff from the AUR.
I guess official arch packages are also ok nowadays, my point was more that one should avoid non-curated repositories of packages such as cargo.