Yes, I agree flatpak is a bad way of packaging. Note, bubblewrap is independent of flatpak. In fact there are some proposals to add sandboxing to nix, which is

Yes, I agree flatpak is a bad way of packaging. Note, bubblewrap is independent of flatpak. In fact there are some proposals to add sandboxing to nix, which is the antithesis of flatpak, using bubblewrap. Firejail is a more usable alternative and comes with very sane default rules, e.g. only allow Firefox to see the Downloads directory in home. However, it has a much larger attack surface than bubblewrap [1]. [1] https://github.com/netblue30/firejail/discussions/4522 https://github.com/netblue30/firejail/discussions/4522