How much more secure and private is Fedora than Ubuntu?

[User53]

@sha123

Flatpaks are not always properly sandboxed. In fact, many allow escapes in their default configuration. You need to adjust permissions yourself and make sure they are not overwritten during updates.

A sandbox with holes is better then no sandbox.

@anonymous447

How can it overwrite permissions? KDE’s Discover shows new perms that app wants before updating

With Flatseal (which is itself a Flatpack)

[sha123]

@User53

A sandbox with holes is better then no sandbox.

A sandbox with known escapes, allowing code execution outside the sandbox, gives users a false sense of security. That’s worse than no sandbox at all.

[User53]

@sha123

A sandbox with known escapes, allowing code execution outside the sandbox, gives users a false sense of security. That’s worse than no sandbox at all.

What do you mean by that?
If you point do any permission:

1. Flathub clearly warns you about any dangerous permission and even points out other unsafe stuff, like X11/XWayland usage.
2. You can change all permission with Flatseal.