snap store doesn't have good review process. you are pretty much running untrusted code with a very leaky containment solution (ubuntu is for works-for-me, not

snap store doesn't have good review process. you are pretty much running untrusted code with a very leaky containment solution (ubuntu is for works-for-me, not security or consistency) same for things like mvn, npm, cargo, pip, etc. specially if using github links directly. (heck, even default git and git repos with hidden hooks etc. or containers with FS sharing that can then plan git hooks... so many entry points if you are a developer with trigger happy source download/build) either trust your code reviewers (a good distro with no shortcuts like the above) or at least use that as a base and run things in a safe containment solution (hint, not docker) edit: or if you have more wealth than sense, or are a security C-level exec who needs to cover your ass legally, there's crowdStrike and other pits to dump that money.