> Not really, distributions do not check every piece of code that is packaged and distributed. Check out the processes involved in getting software accepted by

> Not really, distributions do not check every piece of code that is packaged and distributed. Check out the processes involved in getting software accepted by a distribution: https://packaging.ubuntu.com/html/fixing-a-bug.html https://packaging.ubuntu.com/html/fixing-a-bug.html https://wiki.ubuntu.com/UbuntuDevelopment/NewPackages https://wiki.ubuntu.com/UbuntuDevelopment/NewPackages It looks a lot like they are auditing what gets included very tightly. On the other hand, Flathub is all about convenience, and while I get where they're coming from, they've already shot themselves in the foot when it comes to credibility by allowing third parties to package binaries. If the sandboxes that flatpaks run in were really impenetrable, that'd matter much less, but they're not.