Distributors entering Flatpakland

Yes; there's a reason why suid root applications are much rarer now than they used to be. Theoretical security doesn't matter nearly as much as practical security, and a capability needed by or used by practically every application doesn't add much security, and possibly decreases it; more code offers more attack surface, after all.