You would have to add every program with an auto-updater onto that list, because that's what they literally do; take files streamed online and slap them into its install directory

Like shit, I have 3rd party mod managers for video games that are exclusively built to do such that

Most programs I use (on Linux) do not come with an auto updater. Instead, I get updates through my distro's package manager.

I have Discord installed, because unfortunately that's where my friends are. However, it cannot access arbitrary parts of the file system because it is installed via flatpak; it only has access to ~/Downloads and ~/Pictures.

This is one benefit of Linux distro package managementany people forget - apps can't just update themeselves (possibly after their updater being compromised) but go via package maintainers and are built from source on trusted distro infrastructure.