> Then there's "Flakes" which I never quite understood

Flakes do 2 things:

1. Declaration of the inputs and outputs of some Nix codebase. 2. Pinning the versions of this input sources.

The dependency pinning is similar to package.json/package.lock etc. which are common in language-specific package managers.