There is no reason that you couldn’t, for instance, bind-mount the host’s nvidia drivers into the container namespace when launching the flatpak. Would avoid having to download the driver again, and reduce runtime memory pressure since the driver code pages would be shared between everything again.
People who like having fine-grained security controls over their apps?
And the only possible way to have that is to burn through disk space?
As far as I know, yes. You tell me the alternative if you’ve got it.
I don’t have the time to make a “stop doing math” meme for Unix permissions
So don’t change the defaults?
There is no reason that you couldn’t, for instance, bind-mount the host’s nvidia drivers into the container namespace when launching the flatpak. Would avoid having to download the driver again, and reduce runtime memory pressure since the driver code pages would be shared between everything again.