I love AppImage but one thing I have to admit is that properly integrating it with a desktop environment will be a security nightmare.
The neat thing about AppImages is that they have embedded metadata for things like the app's icon and launchers. Except, (the only way I know) to get this data is by running software.AppImage --appimage-extract
- easy malware target. Even worse if you want to add a feature to show the AppImage icon as a thumbnail in a file browser, making it 0-click.
There should be a way to at least extract the metadata without executing anything in the binary itself.
pic not related
