Well, I have seen PKGBUILDs with arbitrary logic defining the metadata:
https://aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=webor...
Which is what necessitated a separate, statically-parseable .SRCINFO.