Harvey canonical comes with its own stigma for an independent distro I would think, but maintenance burden works🙂.
I rarely have a Flatpak cause trouble as they integrate pretty well in solus but the trust factors can't be ignored down the road. where'd it come from? who is maintaining it? at least arch AUR is 100% transparent and I now know what 'tells' to avoid when skimming code although I'd be lying if I told you how every line functioned..I wonder if FP has this?