Comment by ChocolateGod

What's stopping Flatpak from using a LSM to allow on-demand permissions like macOS?