Is the Fedora OCI flatpak approach not about the trust into the chain of flatpak creation?
src -> signed rpm -> flatpak? So, even in an ideal world where RHEL is immutable and
the best workstation experience is based on flatpaks - RPMs are the building block. This
is completly different to the Flathub approach ...
https://fedoraproject.org/wiki/Flatpak#Fedora_flatpaks