Switch to Linux Reason #45: Limit an app's access to files and devices where supported

Why this matters now

Sensitive files should not be visible to every entertainment or utility app. The principle of least privilege matters on a personal computer too. Flatpak documents application sandboxes, explicit access permissions, portals, and multiple software repositories. The model gives users tools to limit an app's reach, although real permissions must still be inspected (Flatpak basic concepts).

What changes with Linux

Flatpak's sandbox and portals can grant selected access instead of all files by default, when applications and packaging use them correctly. Flathub shows whether an app is verified, what permissions it requests, and whether it is open source. Those signals help users make an informed installation choice rather than trusting every polished app listing (About Flathub). GNOME documents controls for location services, recent-file history, screen locking, and deletion of temporary files. These settings illustrate that private desktop behavior can be configured directly by the person using it (GNOME privacy settings).

Make the move

Use sandboxed packages where appropriate, inspect overrides, and avoid granting full home-directory access for convenience. Backups still matter if a trusted app is compromised.

A Linux installation does not erase data already collected or make every app private. Choose a maintained distribution, check its data practices, protect your accounts, and keep tested backups.

Take the power back