I think this is a small step in the right direction.
IMHO, Flatpak (and similar schemes) with strict sandboxing should be the only distribution method for user applications. If I install LibreOffice, I want to be asked for permission before it tries to access my microphone or location or other sensitive resources.
If you want to give that application access to everything your user has access to, that’s fine, but it shouldn’t be the default.
IMHO, Flatpak (and similar schemes) with strict sandboxing should be the only distribution method for user applications. If I install LibreOffice, I want to be asked for permission before it tries to access my microphone or location or other sensitive resources.
If you want to give that application access to everything your user has access to, that’s fine, but it shouldn’t be the default.