I read a bunch of stuff on the various levels of security of #Linux packaging formats, whether it’s Flatpak, snaps, AppImages, or native packages.
There seem to be a lot of confusion on app verification and what it truly means, on the sandbox, on the role of a package maintainer for a distribution, so I decided to bust a few myths:
@thelinuxEXP Posting my YouTube comment here since YouTube is hiding it from others
@thelinuxEXP On Youtube there’s this comment: “Flatpak is safer than AppImage, not sure about snap.”
Another thing is sure, on most non-Ubuntu systems Flatpak is more secure than Snap: see the paragraph on https://en.wikipedia.org/wiki/Snap_(software) which begins with “The Snap sandbox heavily relies on the AppArmor”. (Flatpak doesn’t have the problem because its sandboxing doesn’t rely on an LSM but on Bubblewrap.)
@thelinuxEXP for me, the only "tinfoil hat" about package managers is the easiness, that's all, for me, it's more intuitive to $yay -S <packages> than doing any other way, also I don't recommend flatpaks for users who have difficulties freeing some space, also flatpaks & snaps if you don't know how to modify permissions for example (...etc), you gonna have a hard time getting things done
also I love copy pasting, and most of online guides show codes to install with yay or pacman in my case
@thelinuxEXP this sounds like it would make an excellent article! I do not watch videos and even if I did I would never go to YouTube for one (we have peer tube for a reason), but I do like good articles.
@wbpeckham
AFAIK you can watch the videos on peertube also.
Nick promotes the videos with YouTube links because he relies on the income from YT.
@thelinuxEXP
@thelinuxEXP Well done on the vid!
I admire the bravery in digging into this shitshow lol.
@jorge Haha yeah, for once, things seem to have been kept civil in the comments, for a change 
Panino, o Moço 
@thelinuxEXP Don't care if it's unsafe.
@thelinuxEXP nice video, well structured and explains well the critical issues of the different formats and approaches to packaging.
In the end there are pros and cons in all options, but this not only for the applications that the user wants to install, but also for the system components, which is why I am in favor of immutable and hardened systems, not so much to prevent what can and cannot do the software or to limit the user but to ensure the consistency and state of system components.
@thelinuxEXP@mastodon.social I wanna mention that Flathub has a human review process. Third-Party packages get scanned pretty hard, as I could atest to 
Though not for updates I believe