[sushiburps]

While discussing applications that are advertised by Flatpak's application metadata as sandboxed: "Allowing access to the host file system does not give the application full reign over your system."

The Flatpak documentation he then links to contradicts his rather controversial idea that a sandboxed application have access to the host file system.

"With Flatpak, each application is built and run in an isolated environment, which is called the ‘sandbox’. Each sandbox contains an application and its runtime. By default, the application can only access the contents of its sandbox. Access to user files, network, graphics sockets, subsystems on the bus and devices have to be explicitly granted. Access to other things, such as other processes, is deliberately not possible."