> Almost all popular apps on Flathub still come with filesystem=host or filesystem=home permissions<p>This is <i>way</i> oversold. That's true of "all popular apps" because those apps are legacy things written to run in the host filesystem and store state to the home directory. And there are good reasons to want to do this.<p>That's not an indictment of the technology, that's just saying that Thunderbird or whatever hasn't been ported to run in a sandbox yet. I mean, yeah. But why complain about the perfectly good sandbox technology and not the app?<p>Edit: this one is even worse:<p>> A perfect example is CVE-2019-17498 with public exploit available for some 8 months. The first app on Flathub I find to use libssh2 library is Gitg and, indeed, it does ship with unpatched libssh2.<p>So, that's a ssh client vulnerability. And indeed, you absolutely want your apps to ship current binaries with vulnerabilities patched, and this app didn't. <i>So isn't it a good thing you deployed that app in a sandbox?</i> Again, why complain about Flatpak when it likely is what's saving you from a client vulnerability?