Managing flatpaks in pamac

Concerning the recommendation how to manage flatpaks

Installing a flatpak using the Pamac GUI will be done using elevated permissions - which is unnecessary when it comes to flatpak.
Thus it is recommended to use the flatpak command to add an app from flathub. Doing so will limit the damage the application can cause if it turns out to be mailicious.

I’m wondering if the described behaviour of pamac (or libpamac-flatpak-plugin?) is as intended or is it a critical issue?
There is an open issue for that I believe Pamac needs authentication to install/upgrade flatpaks (#1271) · Issues · Applications / pamac · GitLab but that sits there already over one year without any activity.

That is my personal opinion.

I don’t know - I don’t use flatpak - I have only touched it for my personal education - filling the knowledge base …

Hence my opinion you quoted …