Due to flatpak bad security design in mind, and require even more privileges, i suggest to have it ditched and rely on the old style of only having packages downloaded&installed from the distro main repos.
As a replacement, i suggest something more secure with the same upgraded packages, a stable and secure rolling distro.