Package: flatpak Ubuntu supports unprivileged user namespaces by default, so there is no particular reason to use setuid there. The current debian packages unconditionally uses setuid though. Maybe this could be avoided on ubuntu?