signature from "Archlinux CIE Repos (Build 2020/2021) <cie@harting.dev>" is unknown trust
Deleting /etc/pacman.d/gnupg/ then running pacman-key --init and pacman-key --populate seems to fix it. So this looks like an upstream bug.