Great Blue

If I had a dedicated NAS and a server for the services, I would choose the consistent path and keep it separated. So I would run nextcloud and jellyfin on the server and let them access storage on the NAS.

I’m in the name after location and function fraction. All but my printer, he’s named Cthulhu because printers are a menace to humanity and it supports wake-on-LAN.

In the end you would build your compiler directly in assembler, so no compiling would be needed.

But if you run your compiler on compromised hardware it would still be possible to insert a backdoor in your programs without you knowing.
To mitigate this vector you would be required to build your own chips… with self developed and assembled machines all the way down starting at growing your own silicon crystals.

You could also look here: ExRx.net

And the Framework Laptop also has a switch for the mic. So even the mic can be completely turned of on the hardware level.

Could you post the output of ufw status verbose ?

Or look into FreeTube, it works really well on desktop

It’s a good bot ;-)

Depending on where you live, you should be aware of the fox tapeworm. It’s really, really nasty for humans and can be fatal.