> We’re not getting too hung up on the “malicious developer inserts evil code in the binary” case because Flathub already works on the model of verifying the de

> We’re not getting too hung up on the “malicious developer inserts evil code in the binary” case because Flathub already works on the model of verifying the developer and the user makes a decision to trust that app. Not sure I agree, it's the difference between being able to review the code (not saying everyone) and having absolutely no idea what's packaged.