Is it best (for security) to install browsers via Flatpak or via a distribution's repositories on Linux?

I agree we must trust our software at least mostly, but if trust it all completely, would there be no point in sand-boxing? But yes, it seems that being more vulnerable to websites is more of a concern.