Suggestion to intentionally keep these "Limitations"; (opinion-piece)

[removed-user]

Dependencies where more than one package provides something (e.g. fcron and cronie provide cron) are not tracked, and the desired dependency must be pinned or added to the configuration manually.

Installing AUR packages that depend on virtual packages (such as java-environment) is not currently implemented. The desired dependency can be manually specified in the configuration, or a supported AUR helper can be used instead.

Depending on the perspective, these can actually be a "blessing" rather than a curse. Example being any Aur malware, or if coming from/starting with a misconfigured system;
Practically any "arch targetting malware" is going to be designed around packaging - depends/provides/libraries, and aconfmgr being outside of just that, makes it a security tool aswell.

Basically forces more explicit selection of dependencies, which is (almost) never a bad thing.