Only allow flathub verified apps to run

flatpak remote-add --if-not-exists --subset=verified flathub-verified https://flathub.org/repo/flathub.flatpakrepo
flatpak remote-delete flathub

Note: removing this will prompt you to remove all installed apps.

Allow whitelisted packages

git clone git@github.com:credfeto/credfeto-flatpak-filter.git
sudo flatpak remote-add --if-not-exists --filter=/home/markr/work/personal/credfeto-flatpak-filter/flatpak.filter flathub-whitelist https://flathub.org/repo/flathub.flatpakrepo

Downgrading flatpack packages

Based on this article.

Get versions of the installed package:

flatpak remote-info --log flathub-verified us.zoom.Zoom

sudo flatpak update --commit=<commit_hash> <Application ID>

Preventing package from being updated

Mask the package:

sudo flatpak mask us.zoom.Zoom

Unmask the package:

sudo flatpak mask us.zoom.Zoom --remove