Well, one way to address this would be to have a little hook that triggers when you do a full system upgrade, and it updates your flatpaks.

also flatpaks are still centralized thanks to flatpak itself, same for snaps, nix, cargo and similar package managers. It's not like you have to update every single app by yourself, like for AppImages and apps on windows or macos for example.

now THAT is a name !

IT'S TIME TO GET WIERD

I personally use KeePassXC (KeePassDX on android), it can have TOTP code generation for 2FA for any service. And since it's a password manager, it's secured by a master password.

il faut la garder propre :)