How to allow fine-grained device access in flatpaks?

device=all is a very dangerous permission. How can I allow only access to specific devices instead? If this is even possible.

Dowload Flatseal → App → Filesystem → Other files

yeah but that’s just a regular --bind no? bwrap’s --bind and --dev-bind are different