Flatpak Is a Sandbox—It's the Apps That Are Insecure

Flatpak – An Insecurity Nightmare

Critics keep calling Flatpak a security nightmare, but the author argues the sandbox itself works fine—the real problem is old applications built for unconfined environments that rely on static permissions. The piece traces Flatpak's container-based origins, defends it against cherry-picked FUD, and points to the "fractureiser" malware, which failed inside PrismLauncher's default Flatpak sandbox, as proof that partial confinement still blocks real attacks.