Flatpak used to have a lot of issues with sandboxing, but in recent years the situation has gotten better because of two things: 1. A strong push to help packa

Flatpak used to have a lot of issues with sandboxing, but in recent years the situation has gotten better because of two things: 1. A strong push to help package maintainers fix sandboxing mistakes, expose the APIs that need to be exposed and lock down the APIs that are not needed. It used to be pretty bad but it's pretty rare to see sandboxing problems nowadays. 2. You can now use a tool called Flatseal, or in KDE a new builtin settings interface in Plasma 5.27, to modify sandboxing settings for applications in an intuitive way. If you're trying to use an IDE and just want to expose every permission to it, you can easily do that now. 3. Unrelated to Flatpak, Wayland is now getting a lot of the video capture and screen recording APIs that are needed.