Again, you seem to be missing the point. Nobody would be "removing permissions with xyz tool". People are told something is safe, therefore it must be safe. If it's not then it's not. And again with PGP, one example how a "simple user" could have PGP keys is if they use PGP email at work. Management != tech people, so container must equal safe in ooga booga brains. Keys get stolen because of supply chain (remember that library updates are separate and slower for flatpak). Container must equal safe, so everyone disregards what was written about XYZ program and the one to blame becomes the simple office worker*, another victim of capitalism*. Or the IT guy. My point is, marketing wrong.