Really there with you on Debian bookworm!

Less with Flatpak. It is, IMHO, the wrong solution to a real problem; I install n flatpaks and suddenly I have n+1 openssl, libpng, etc. library versions to worry about, and unknown capabilities and policies for responding to security issues in each of them. Give me Debian unattended-upgrades any day!