These days, everything on linux is either random potentially insecure PPA repos, shell scripts loaded from a server via curl and piped to sh with sudo access, or "snaps" (whatever the fuck they are). That all ontop of wildly outdated packages in the supported repos. No wonder everyone rants and raves about "docker", now we know why things moved into that space.
I know, this is my opinion and it's biased. Yes I may not have done things properly, or there are other ways of doing things, etc etc.
Snaps are actually a great security and packaging advance that decouples package dependencies from a common library set, while maintaining a mechanism to patch and upgrade otherwise dangling library deps. It also starts down the long road to confining software, because what you run shouldn't automatically assume all your privs. Basically iOS style apps for Linux.
People who pipe web content to a privileged shell are on their own at present. Arguably they should be warned, but that assumes taint tracking at every level of the operating system, and no production OS has that. If the software is a dependency shit show then putting it in docker (and then into a VM) is a better compromise.
Windows is already deprecating the installer model for the app store and cloud concept, they just didn't make it stick the first time round.
Snaps are a good idea in theory but do not work in practice.
No more graphical stack.
This happened to me with not only X. It seems to me that installing is tested. Removing is not. It was also badly documented last time i checked.
Happened with discord last time.
Ubuntu needs to more clearly explain whether the app is confined, and force apps to use an API to change the system environment to allow rollback, multiple packages of the same function etc.