Thank you very much. I’ll look into this.
Edit: I appreciate the suggestion but docker is not an option in my case. For further context for anyone else reading, I will sacrifice as many features as needed to ensure a secure system, even if this gets to the point of a locally run and air-gapped system. Though, if there is a level of convenience out there that doesn’t meaningfully sacrifice security then I would obviously like to take that route.