Concerning the recommendation how to manage flatpaks
https://forum.manjaro.org/t/topic/158868/6
Installing a flatpak using the Pamac GUI will be done using elevated permissions - which is unnecessary when it comes to flatpak.
Thus it is recommended to use the flatpak command to add an app from flathub. Doing so will limit the damage the application can cause if it turns out to be mailicious.
I’m wondering if the described behaviour of pamac (or libpamac-flatpak-plugin?) is as intended or is it a critical issue?
There is an open issue for that I believe Pamac needs authentication to install/upgrade flatpaks (#1271) · Issues · Applications / pamac · GitLab but that sits there already over one year without any activity.