What you are describing here is fase feeling of security. Many flatpaks have access to your home dir by default. This is already security flushed down the toilet. Browser is the biggest attack vector nowadays and this is where your accounts reside. Worrying about package manager while not giving a shit sbout bank account seems out of place.