The vast majority of flatpaks are not made by the developers of the software. I could fork any software that is not in flathub, make modifications without permission, bundle a flatpak and distribute it as the official version. You would be none the wiser about it.