[POPOSYS]

On a Linux system, how to secure a system so that users are not able to run binaries they downloaded from the internet?

How can application whitelisting be achieved?

Does Flathub come with any features that help with that?