I personally use crafty controller in a docker container on my NAS and it’s been relatively solid. There’s a bit of learning up front, but it works well once you understand it.

Server is relatively easy, but to get to zero telemetry on the client, you're going to have a lot of overlap with things you'd go sailing for. What's your feelings on the microsoft account requirements? If that's a dealbreaker, a legitimate client likely won't get you there.