@vancha @kev @purism currently ( or last i checked) it requires you to either find an already written flatpack policy or write your own, if there is no policy, then it runs uncontained, which is why i said unsandboxed by default.