Debian yes, but don’t install from flatpaks or docker. Neither is secure.

AppImage can be secure if the release is signed.

Docker can pull images securely, but it’s disabled by default and many developers don’t sign their releases, so even if you enable it client-side there’s a risk you’ll download something malicious.

Flatpak is never secure because it doesn’t support signing of releases at all.

Apt is always secure because all packages must be cryptographically signed (by default).