stalebrim that's an interesting statement, please elaborate.
I (think) I know my ungoogled flatpak is from the ungoogled creator Eloston because eloston is in the flatpak file name. I know my flatpak zoom is by the zoom people because they extort me, I mean charge me, for using. My jitsi flatpak is made by the jitsi people.
Is it possible I'm being duped by an app masquerading as a legitimate flatpak app? or some bad actor? Is that what you meant? Or your mean the smaller sloppily-written stuff.
edit--responding to this statement: "There's no clear indication on Flathub whether the flatpak is from the actual creator of the software."