Arch wasn't affected at all, cause the backdoor trigger was only on deb and rpm distros.
However it still a good practice to update your system and leave this version behind. Anyway, Arch already updated and is no longer distributing the backdoor version, therefore 5.6.1-3 is safe
You can use Arch btw again. Actually, you never had to leave it at first
I think it solves nothing, cause it's not primarily a XZ issue itself, but some bad actors that infiltrate into the community for years to finally use his credibility to upload a backdoor. Every single package is vulnerable to this kind of attack and has little we can do to completely avoid it
Of course we have to make the best moves to prevent this happening again, however it's not a simple "I'll use X instead of Z" (see what I did here?!), cause both X and Z may be doomed with this shit anytime
I’ve been using some sort of unix CLI since the time I learned to pee standing (last year?)
Well, if you're a woman that's a huge thing, pee standing!
If you're a man, pee sitting (at home/friends home), please... It makes cleaning very, very simpler and the bathroom doesn't smell like public restroom
And more, it's known that av can increase sloppy behavior regarding security in people that does not know about security, making them feel safe and, therefore, clicking anywhere and installing anything
Av does increase the risk of being infected for most people
The way this xz backdoor was treated is good enough!
Identify
Announce
Evaluate
Rollback
Always with good version control and cryptographic keys to sign the packages
As long as you don't run Gentoo or any other distro that require you to compile your own packages, you can install the Firefox from repos and you'll have the same result.
I really suggest you to use yours distro package manager to install Firefox and use KeePassXC as flatpak, cause this way you'll have your apps updated.
Your solution, despite works, you'll have to update the packages by hand
However be aware that Ubuntu force you to install Firefox Snap even if you run apt install firefox, so you'll face the same issue. For this reason I suggest you to move away from Ubuntu
Well, I guess u have your answer, tho
The important thing here is to feel good with your decision