Comments by "Gilad Barlev" (@GSBarlev) on "Bottles Is Sick Of Downstream Linux Distro Packages" video.

  1. ​ @ayaya-ayaya Except flatpak relies on a very rigid privileges system—the default is for the application to be heavily sandboxed. Flatpaks also do not contain their entire dependency chain. Unlike AppImages, it's very common for a given package to depend on a pinned version of a runtime.
    3
  2.  @ayaya-ayaya  Three things: 1. Flathub is moderated (and I've witnessed firsthand what happens when a maintainer goes rogue and tries to insert malware—the Flathub staff locks that stuff down) 2. The requested permissions are shown when you install the package 3. The user can always use a tool like Flatseal (or just use the CLI) to further restrict permissions (for example, I made sure Audacity had no network access around the time the telemetry 💩 hit the fan)
    1
  3. (ffmpeg absolutely has a flatpaks, btw—it's a runtime / dependency for other flatpaks like Handbrake and OBS, IIRC)
    1