I don't have any experience with Qubes or Manjaro, but Arch Linux? its default repositories contain non-free 3rd party software, unlike Debian where you explicitly have to add those repositories in sources.list, so already your basic install most likely contains software where you have no idea...