Headless remote desktop is nice as well

I'll rephrase: VPN server is someone elses computer

Vpn is someone elses computer

Your concerns are valid.

In my opinion the easiest solution, if you don't know what youre doing (or dont wanna care) would be to use exclusively an immutable distro. That would lock you out of tweaking the system, but also heavily limit any potential malware. This should be sufficient imo:

• keep system up to date
• dont run programs or commands from unofficial channels
• have firewall enabled and running
• make offline backups of user files
• use immutable distro

airgapped 2FA

No way

One could implement a finger based pin code where numbers 0-9 maps to unique fingers. Maybe that could somehow work?

Odd that lang parameter is the last argument. makes more sense to have it being the first one

Just use the curtains

How did I not know about this? Thanks!

From cli you cannot right now. Thought you ment through GUI. The discussion about this is ongoing in 3718 and in 1687. Go and hit thumbs up on them.

Uninstall app from overview