From TFA regarding security updates on libraries and dependencies: "A valid point. Since the Flatpak developers were fully aware of this problem, they came up

From TFA regarding security updates on libraries and dependencies: "A valid point. Since the Flatpak developers were fully aware of this problem, they came up with an acceptable and easy solution: flatpak-external-data-checker (f-e-d-c). f-e-d-c is a tool that automatically checks for external sources, such as dependencies and binaries. When an update is found, flathubbot automatically submits a merge request. Here are some concrete examples: [1] [2]." At this point, it's getting more complex and harder to deploy than dynamically linked binaries, is it not?