Fair, although you’re probably fine for “hosting jellyfin for your family” levels even then. If cloudflare boots you, swap to a free tier Oracle Cloud VPS and set up an nginx proxy.

They removed that clause. Ctrl-f “video” on their ToS page gives 0 results

https://www.cloudflare.com/en-gb/website-terms/

Think it’s not supported for the root filesystem anymore but that’s not my usecase anyway. Still supported for non root filesystems.

ZFS without having to faff around with DKMS

deleted by creator

GrapheneOS has strict sandboxing for all apps. App A cannot talk to App B unless given explicit user permission. Google Play services is not installed by default, and if you do install it, it’s subject to the same sandbox. This basically addresses all userspace tracking concerns, unless you actively choose to weaken those defaults.

GrapheneOS has strict sandboxing for all apps. App A cannot talk to App B unless given explicit user permission. Google Play services is not installed by default, and if you do install it, it’s subject to the same sandbox. This basically addresses rid of all userspace tracking concerns, unless you actively choose to weaken those defaults.

(There are still concerns associated with the closed source firmware of the baseband modem)