u/slickyeat

I realize that M1 presents itself as having partnered with a bank (which they now own) and that it is FDIC insured but after watching this video I decided to have a look at M1's TOS.

>M1 High-Yield Cash Account(s) is an investment product offered by M1 Finance, LLC, an SEC registered broker-dealer, Member  FINRA / SIPC. M1 is not a bank and M1 High-Yield Cash Accounts are not a checking or savings account. The purpose of this account is to invest in securities, and an open M1 Investment account is required to participate in the M1 High-Yield Cash Account. All investing involves risk, including the risk of losing the money you invest.

https://m1.com/legal/terms/

What does this mean exactly?

If it's not a checking account and all HYSA deposits are in fact "investments" then is it not covered under FDIC?

I'm aware that by allowing a Flatpak to talk with "org.freedesktop.Flatpak" you're actually able to run native applications by calling the flatpak-spawn command.

Example:

You can start by opening an interactive shell:

>flatpak run --command=sh com.heroicgameslauncher.hgl

Then run the following command:

>flatpak-spawn --host scummvm

Heroic Launcher (along with a number of other apps) actually enable this permission by default.

This seems to defeat the purpose of sandboxing though since a malicious app that's running within Heroic Launcher could easily hijack the host device.

Is there a way to provide a more explicit set of permissions so that only certain apps can run?