How a person 'adopts' 408 packages and controls their build scripts?

Orphaned packages, so other people are able to file requests and take over them. That's how AUR works — it's community-driven [0].

[0]: https://wiki.archlinux.org/title/Arch_User_Repository

They were orphaned, so anyone could adopt them. There are 15k other orphans at the moment.