the attack surface for something that isn’t officially maintained by the developers, and that doesn’t have more vetting (e.g. distribution packages) opens up room for malicious actors.
Funny that Jia Tan was an official maintainer of xz until he was found to be problematic.
Speaking of verifying, you know you can’t really verify anything on the snap server since they’re proprietary, right? On the contrary everything on flathub is laid to bare for anyone to look at.
In the end, you’re free to choose. Since you’ve kindly provided your argument, I’ve provided mine in hope you’d reconsider.