Is Snap safer than Apt?

Question

linux

Good afternoon!
I learned that the main difference between these package managers is that snap itself contains everything you need, while through apt, setting up dependencies is up to the user. Due to which snap weighs more and apt weighs less.

I also came across information that it is better to install heavy applications through snap, and everything else through apt.

And from several other articles, I concluded that snap provides more security. Does this mean that it is better to install all kinds of messengers via snap, or did I misunderstand?

Answer 1

There are some sound thoughts here, but the idea is mostly wrong.
snap is a "portable" (portable) application, if in Windows terminology. It contains all the additional libraries that it may need, just like Windows does (due to which a computer can have ten copies of the same library of different versions)
, apt installs a "regular" package that depends on system libraries. And that's all. There is no more difference between them.
As far as security is concerned, everything is twofold. On the one hand, a snap may contain a library that does not have a vulnerability that a system library has, on the other hand, when I fix a system library, I fix a vulnerability in it - but not in a snap!

snap provides more security

No. Not more and not less. The same.

through apt, setting up dependencies is up to the user

No. On the package builder.
It’s all the same how to install messengers - they leak data not because they are compromised by third parties, but because they agreed with them ...

Answer 2

And what about UTT security and instant messengers?
SNAP allows you to install the entire package with all dependencies as "portable" without touching the main system and installed applications. In this regard, it is more convenient and safer.
APT, on the other hand, installs all dependencies directly into the system, and if there is no dependency or they conflict, it will not be able to install the application

Answer 3

snap despite restrictions on access to resources is not a docker and not a virtual machine. binaries are not executed in some isolated space

Answer 4

dependency setting is up to the user

No. On the package maintainer.

I also came across information that it is better to install heavy applications through snap, and everything else through apt.

No.

And from several other articles, I concluded that snap provides more security.

No.