Next step, display the “potential unsafe”-badge next to verified or unverified, that can be found on the same page. In example flathub.org/apps/io.github.shiiion.primehack is marked as verified, but if you scroll down you can see the application has full system and data access and is marked as potential unsafe.