Do windows applications run inside the flatpak sandbox or not?
If someone install a malware from linux using bottle, will it has all access like a native application or only flatpak permissions?
They should use the flatpak sandbox, but I would still advise to be careful.
It shouldn’t have access to everything like in native Wine, but you have to keep in mind that Wine translates windows calls to linux calls so some malwares may still work even if they don’t have access to certain places.
It would be nice to see some security oriented YouTuber or Blogger try running some windows viruses in Bottles flatpak.
