Follow

@strypey

AppImage not only has no sandboxing but also does some rather dangerous operations (mounts, scripts ran) when the binary is started. And it comes with zero integrity assurance because it's essentially a large executable binary that you download and run, without any digital signatures.

At the same time Patchwork is also available as a Snap, which comes with pretty strict sandboxing, digitally signed package and automated updates.