There has been a recent wave of AUR malware; is flathub or flatpaks susceptible to this? My understanding is that each Flatpak must be reviewed and approved. Is it possible that the AUR malware would hit flathub too? I recently learned that we should be inspecting the pkgbuild before installing AUR packages. Should flatpaks be inspected?