

From what I’ve read it seems you shouldn’t run a browser as a flatpak anyway, as this somehow weakens the built-in isolation.
I think I originally read about this somewhere librewolf-related but can’t seem to find it now.
I did find this similar discussion: https://discuss.privacyguides.net/t/correct-way-to-install-browsers-on-linux-securely/27046/6











Nope it’s just apt update & upgrade. Iirc apt tells you when the kernel was updated and needs a reboot as well.