It’s also a smaller ecosystem than say flatpak, so it gets less use and less checks on it. Seems less well maintained than APT as well.