News for hackers. Stuff that matters.
Re:Flatpak: A security nightmare – two years later by hedora on Friday October 02, 2020 @11:28AM (#24663606)
Docker dynamically links; you don’t need to recompile the world to update a docker image. You just regenerate the docker image.
Re:Flatpak: A security nightmare – two years later by 013a on Friday October 02, 2020 @11:34AM (#24663684)
It can dynamically link within the container, but as far as I know the container as a whole does not dynamically link with the outside world. Its effectively a chroot with a full system image inside that root filesystem.

And that's what we're talking about, effectively; how self-contained and sandboxed the package itself is.