But in all seriousness, I am running omarchy now, and I will almost definitely be switching to arch at some point in the future.
I've been using arch for over 10 years btw.
To be at risk, you'd first need to publish your application. The attacker would separately have to figure out how to identify and access your computer for attack.