In which way is it untrusted? If you use CachyOS, you use their binaries, that could contain anything at all inside of them. Do you draw the line at a shelll script you can read yourself?

I don’t really see how GNOME is any more keyboard focused than, say, KDE. If anything, other DEs give you much more freedom for a keyboard workflow.