> greater LGBTQ+ acceptance recently has led to people being more open with that side of themselves, rather than it being the result of environmental pollution
That's a very weird implication. All human beings are complex products of social, economical, genetic, environmental and historical factors.
External factors do not make a person "less themselves" or "less real".
This is plain false. Most production-grade distribution do extensive vetting of the packages, both in terms of code and legal.
Additionally, distribution packages are tested by a significant number of users before the release.
Nothing of this sort happens around any language-specific package manager. You just get whatever happens to be around all software forges.
Unsurprisingly, there has been many serious supply chain attacks in the last 5 years. None of which affected the usual big distros.