flatpaks are all updated at once, just like distro packages, so yeah you might need to commands, but that’s still very different to having each application update itself (and the security hell implied by that)

Also I think pkcon can manage your updates across various backends (unless you are on Arch, where I think there are both technical & ideological objections to having a simple tool that just works)

I don’t think that many companies have their shit together well enough to mirror the source code, besides the RHEL repos aren’t small, so that’ll cost.

The companies I’ve helped either had a minimalist mirror to reduce the surface area of what was installable or to save on cost.

It’s possible that a few enterprises do a full mirror of all RHEL sources, but i doubt it’s many