due to the nature of arch and its rolling releases, it tends to get bleeding edge updates/features rather than having to wait for a major update to iron itself out then get rolled out. If you’re a gamer for example, if Valve fixes a bug in the gpu driver, then Arch would probably get it asap (especially given that Steam OS is arch based)
Any torrent could be a honeypot, why would it only affect private trackers.