The permissions have to be justified when uploading to flathub (via PR) and the exceptions are not always accepted. Flatpaks ARE safer than system packages and if you think otherwise I recommend you taking a look who can access all passwords on the keyring and who doesn’t. (Getting such exception on flarhub is very hard). Flatpak 2.0 hopefully gets user approvals for permissions. But still with current flatpak you have the option to reject permission via flatseal.

I would remove Brax Phone altogether, that guy is fearmongering people into buying old insecure phones. There were times I was watching his videos until I saw the pattern…

It looks like it might be vibe coded, atleast thr detailed claude.md file suggests that. It even includes “no Co-Authored-By” clause, which would suggest the author tries to hide how much is actually generated. Personally I wouldnt trust it unless it is audited by someone or by myself - which I wouldn’t do with a ton of generated code…

Also a side question: are you still using Proton? I thought you said, and I quote, “never again” when there was the last hysteria…