Damn, I was not aware of those issues. Thanks for bringing them. I have migrated to Flatpaks in my instalation of Z16 cause I thought they were safer and "the next step".
But given its poor theme support in Z16 (wasnt as bad in Z15) and the issues raised here, I will go back to the good ol' PPAs where possible.
I have a couple questions though. How much safer/better are PPAs in comparison? Do they have sand-boxing?