Flatpak Trust and Transparency

Did you have a look at this recent topic which seems to address your question?