http://secure45nbquibuw6thmenrfamhobdkkrllgxrtayn4sgmnexremexyd.onion/linux.html
Flatpak's permissions are also far too broad to be meaningful. For example, many applications come with the filesystem=home or filesystem=host permissions which grant read-write access to the user's
home directory, giving access to all of your personal files and allowing trivial sandbox escapes via writing to ~/.bashrc or similar.