FWIW You can put a rpi in gadget mode and use nbd kit to mount nfs/smb shares..

Having mobile downloads work in any kind of same way. Honestly just offering a download file with quality drop downs would solve the issue for most people

Secure boot is the first thing that gets disabled on any machine of mine. Why is this a bad thing?

Essentially secure boot is supposed to validate that only properly signed drivers are loaded on system startup. That allows you to block malicious/cheat drivers from being loaded because a signed AV/anticheat driver was loaded before and now it can properly control drivers that are being loaded after it.

Without it you are risking that the malicious driver will be loaded first and then make itself invisible to the later drivers.

Of course there are ways to bypass this too, but it adds a whole other layer of complexity.

Tldr

Secure boot is there so drivers loaded at boot time can trust that nothing was tampered with before they were loaded.

I really do appreciate the sentiment, and in a flippant sense I agree, but if we're being real, the potential for harm to innocents, at least in the short/near term, is far greater if society devolves into vigilante mobs; study the Cultural Revolution if you want a realistic picture of some of the failure modes here. On the other hand, a period of chaos might be beneficial in the long term; that's the accelerationist position. Worth considering, but be careful with that mode of thinking. The ends justifying the means has gotten a great many people killed for ends that never manifested.

Neither are acceptable, so a third way must be found

Data governance compliance is a huge issue for some industries. "The days can't leave the country" will drive AWSs normal customers to demand bespoke regions setup and turned on

Yes, I'm surprised no one else has commented on this. Some regulations require that at least some backups be located in the same country or region.

The fact that all helium escapes the atmosphere, and is essentially impossible to produce makes things a bit more complicated.

Gatekeeper should be banned. It's my machine, let me use it

You can just click to run the app. Gatekeeper doesn't stop you from running apps.

If you really want to ban Gatekeeper you can. sudo spctl --master-disable

As the saying goes about being careful, measure twice and cut once.

A bunch of things break when you do that, though I do run my osx machine that way. The point is that it shouldn't be the default, it's the end of personal computing.

The caveat here is that it needs to be local. I have a few things that work with HA, but they basically highjack the apps cloud login tokens ..

That is terrifying

With the way legislation is going these days, self hosting is becoming ever more important. RAM for zfs + containers on k3s doesn't end up being that crazy if you assuming you need to do everything on your own. (at home I've got 1 1tb ram machine, 1 512gb, 3x 128gb all in a k3s cluster with some various gpus about about a half pb of storage before ~ last sept this wasn't _that_ expensive to do)

Just dump it in a gist. That your of knowledge should be free