huh? fingerprints are not 'usernames' (you don't just provide a 'username' for an applepay authorization for example).

and yes, adding this in you do _not_ have to type out your sudo password and can grant permissions using only touch id.

Just curious, are you saying there is obvious malware within the Arch official repositories? Are you referring to instead the user repositories (AUR)?

I know Arch has: https://wiki.archlinux.org/index.php/Arch_Security_Team

but I'd be really interested to hear that the official packages have obvious malware.

I think they intended the phrase as a question; they're proposing that a maintainer should not just ask "is there obvious malware in this package?", but also several other questions (which they list afterwards).

This is the correct interpret

Ha, if only you were really betting, I'd love to bet the opposite side of this. Nothing about how Facebook has been handling its recent crises would lead me to conclude that they 'know what they're doing' in regards to public relations.

I don't believe he's saying he would not use the product BECAUSE the FDA has approved it, but rather FDA approval has not always been the best indicator that a particular product is indeed safe.