Linux

Relying on flatpaks seems like a bad idea.

A more reasonable take might be: don't install flatpaks willy-nilly without first verifying that they're maintained by the original developers (or an authorized third party, which is sometimes the case). The same way I wouldn't run apt install <package> without first checking the package info to ensure I'm installing a legit package (if I'm not already familiar with the specific package I'm installing).