Didn't realize this was still open.
Is that any particular reason this one hasn't been blacklisted yet?

Also I suspect that both Keybase and KBFS need a deep looking into as last time I built them from source the pulled in the world from all over github. And I mean a crazy (at least to me) amount of stuff. The sheer volume of it made re question the "security" of the program. Cause I'm guessing no one there is doing any security audits on the crap tone of stuff they are pulling. (or at least were.. like I said above.. it's been a while)

just pulled the PKGBUILD

and right there in it is:

# Fix paths to run electron /path/to/app (or our minimal wrapper script).

probably no reason - electron is already blacklisted, so its not
actually possible to install anything that depends on it; which
make this a low-priority house-keeping task rather than a freedom
issue