What permissions are actually needed?

Currently the app has completely unrestricted filesystem permissions.

My question is, how could this be improved?

I havent used it much, as its stuck in an infinite search-loop. But as its reading files, having it first read-only would already help.

Then as a next step, you could focus it to only read folders of apps installed?

- "Powerful fast search" looks like /home, /run/media/ and /mnt would be enough, in readl-only mode
- "Keep Control", not entirely sure how this should work, and what permissions it needs
- System snapshots: this sounds like quite a task, but may simply use an external tool like snapper or BTRFS ?

Also, Seems like this app is official but not yet verified, would be great to verify its owner so that it appears in the --subsection=verified repo of Flathub.