That’s one of the main reasons I use a rolling release distro. I used Arch for years, and now I use Tumbleweed.

With packaged apps (like flatpak, snap, etc), you can end up with outdated dependencies in those apps because they bundle everything together. So instead of fixing bugs once for everyone, you have to pester each individual package maintainer to update the dependencies. However, this is mitigated by having these apps be somewhat containerized and limiting impact of a breach on other apps, so YMMV depending on what kind of sandboxing you use.

I’m not really decided here, and I use both flatpaks and distro packages. I don’t touch snaps though.