IMO flatpaks are a better option, appimages are just bringing people back to the insecure "find it on a website and download it" method of package management

This is also one of the reasons why I dislike curl sh

[–] lukalix98@programming.dev 6 points 1 day ago (3 children)

Flatpaks can be unsafe too though.

[–] AudaciousArmadillo@piefed.blahaj.zone 5 points 17 hours ago

Same goes for .debs from Debian stable. There is no absolute safety. But downloading unsigned code from a random website is far down the safe list.

[–] Marija_@programming.dev 2 points 14 hours ago

I still prefer repositories, but official AppImages beat unofficial downloads.

[–] spectrums_coherence@piefed.social 3 points 16 hours ago* (last edited 16 hours ago)

AppImage defended and used grossly outdated core component like FUSE2 for a long time, and comes with zero sandboxing by default.

IMO, flatpak needs to improve in terms of security, but it is a strict improvement over AppImage.