Fair, although you’re probably fine for “hosting jellyfin for your family” levels even then. If cloudflare boots you, swap to a free tier Oracle Cloud VPS and set up an nginx proxy.

They removed that clause. Ctrl-f “video” on their ToS page gives 0 results

https://www.cloudflare.com/en-gb/website-terms/

Example: https://grapheneos.org/faq#baseband-isolation

Yes, the baseband is isolated on all of the officially supported devices. Memory access is partitioned by the IOMMU and limited to internal memory and memory shared by the driver implementations…Earlier generation devices we used to support prior to Pixels had Wi-Fi + Bluetooth implemented on a separate SoC. This was not properly contained by the stock OS and we put substantial work into addressing that problem.

Baseband modems were not isolated from kernel memory in stock Android, GrapheneOS had to do it themselves using the IOMMU. We do not know for sure due to the proprietary/closed-source nature of baseband modem drivers, but we have no reason to assume any OEM (Samsung, Xiaomi etc) implemented proper isolation of baseband modem and system memory.

Use argparse instead of input

Think it’s not supported for the root filesystem anymore but that’s not my usecase anyway. Still supported for non root filesystems.

ZFS without having to faff around with DKMS

It doesn’t care about copyright or authorship, which becomes a huge problem due to content no longer having a real home in IPFS, everybody can pin, cache or share content on IPFS.

Sounds like a feature, not a shortcoming

Ubuntu LTS has the exact same problem. And unlike Ubuntu, with Debian you have the choice to use sid which is as up to date as Arch usually

Works really well with Flatpak Steam

deleted by creator

GrapheneOS has strict sandboxing for all apps. App A cannot talk to App B unless given explicit user permission. Google Play services is not installed by default, and if you do install it, it’s subject to the same sandbox. This basically addresses all userspace tracking concerns, unless you actively choose to weaken those defaults.

GrapheneOS has strict sandboxing for all apps. App A cannot talk to App B unless given explicit user permission. Google Play services is not installed by default, and if you do install it, it’s subject to the same sandbox. This basically addresses rid of all userspace tracking concerns, unless you actively choose to weaken those defaults.

(There are still concerns associated with the closed source firmware of the baseband modem)