I think I’d be satisfied with just not allowing people to take over orphaned packages. That seems like a glaring attack vector and closing it would not harm the AUR in any way.

And yea, arch (and its derivatives) probably should not ship with AUR helpers pre-installed.