The package managers right now ARE that curated list and distributions like Debian have proven themselves to be trustworthy.

Of course, you can always find something wrong with every approach, but the truth that everyone needs to face here is that you need to trust SOMEONE to distribute good software to you.