@eric @dcc @SuperSnekFriend flatpak maintainers can ship any and all permissions. They can for example ship "allow all /mnt /media and /run/media paths". But then theyd have to face the wrath of the security nerds. I have used flatpaks that ship such things by default.