You aren't owed a native package for whatever OS you're using. In fact, you should be thankful that flatpak exists because the most common alternative is piping wget into shell.

And if you care so much about security, just build your stuff from source. Whether flatpak or apt, at some point you will run third-party code.

-said the person that probably has never worked in their entire life