Flatpak: adjust permissions here, workaround there, different workaround for a different DE. My solution: I'm very careful about what I run, but when I do run

Flatpak: adjust permissions here, workaround there, different workaround for a different DE. My solution: I'm very careful about what I run, but when I do run it, I just do. No fanfare. No security theater.