2026-09-19 15:49 UTC
Flatpak is missing even rudimentary sandbox features. Apps that don’t have an easy sandbox escape are rare. And this is all useless when it’s the app developer who decides the app permissions because most users won’t tinker with every Flatpak they install.
Flatpaks are NOT any more secure than system packages, and their “sandboxing” should not be trusted to accomplish anything.
Replies (1)
-
@dieTasse@feddit.org 2026-10-06 07:34
The permissions has to be justified when uploading to flathub (via PR) and the exceptions are not always accepted. Flatpaks ARE safer than system packages and if you think otherwise I recommend you taking a look who can access all passwords on the keyring and who doesn’t. (Getting such exception on flarhub is very hard). Flatpak 2.0 hopefully gets user approvals for permissions. But still with flatpak you have the option to reject permission via flatseal.