Mahi

Desktop environments are not equal form the security perspective, but they all are rather insecure, because security is hard and harms UX, and the GNU/Linux desktop is traditionally focused on UX and the user freedom by sacrificing security. However it is possible to build a secure environment based on an insecure DE, what Qubes OS does with XFCE, for example.

As a GNOME user who is absolutely not a hater of GTK+ and GTK4 I think it’s a sane decision. This is what developers of complex graphical software should do rather than to spend an indefinite amount of resources on the transition to a newer branch or a different GUI library.

I’m a big fan of the idea of sandboxed apps. Flatpak is not great as it compromises sandboxing for compatibility (both with distros and apps) and also it’s quite stagnant now. But there are no other options anyway, so I use it.