

Is flatpak the way?
Steam can be installed natively or in a Flatpak. The latter can be a little fussy every once in a while, depending on your setup, but has the advantage of somewhat better sandboxing.
CVE-2026-34078 CVE-2026-5674 CVE-2021-21261
No no, tell me how its sandboxing is even adequate.
In addition to ruining Single Source of Truth for installed state and weak validation and resource usage, it feeds you lies about sandboxes. AND YOU BELIEVED IT!





I thought it was “messy, generated code with little cohesion and only barely functional”, but really it’s the cohesion part.