

A lot of flatpaks early on wouldn’t survive a major point release upgrade or worst case would hold on to dependencies and the user would end up with an unbootable mess after an upgrade.
I haven’t seen that recently though.
However I regularly run appimages on my fedora silverblue system so take what I say with a grain of salt.
Can you expand more on the key management? I thought https://chat-e2ee-2.azurewebsites.net/ passes a PSK Through the header and sets that as a cookie in the browser to sign further comms. I could be mistaken of course.