I've been using AWS for years, but have never ventured outside the Quick Start
and AWS Marketplace
sections when launching an EC2 instance.
The AMIs from the AWS Marketplace
look trustable, they have a link to the seller profile, etc.:
Compare this to community AMIs, that seem to appear out of thin air, with no information whatsoever on who the heck created and uploaded it:
How to know where a Community AMI comes from? Can these be trusted?