I agree SimpleX is superior protocol. I use it to share text between my devices. But I’m little bit hesitant to recommend it to friends and family because it is VC funded. Until SimpleX becomes non-profit or alternative implementation of SimpleX protocol starts showing up, I won’t use it as my main IM.

This is why I like GrapheneOS on phone. It is hardened and secure, but never gets in the way of your work. Everything works as it should. Kicksecure is the closest on the desktop space, though Fedora is also reasonably secure.

I think it depends on maintainer of the device. For me personally, LineageOS has broken a basic workflow like having Signal voice/video call. None of the IM apps are able to pick audio from microphone on my device (and various other models as well) due to a bug in LineageOS for almost 6 months. I regret installing it.

I think, OP is pointing to the fact that ECH makes it harder to block connections to mothership from proprietary apps, TVs etc. These apps could now use ECH, DoH to hide it’s traffic from being observed.

But OP could always buy a better router that can proxy layer 7 traffic and block the traffic if desired.

Tailscale already has Mullvad integration. Why don’t you utilize that?

This is incorrect. It strengthens both privacy and security in a lot of ways for an average user.

FSF does not get in the way of security. FSF believes source code should be publicly available in order to even assume the software is secure or private. In a perfect world that would be nice. But in the real world, proprietary blobs are required to make the hardware functional. As long as OEMs are removed about open sourcing the firmwares, both GrapheneOS and GNU are right in their own way.

Yep. It was developed to improve parallelization and security of Firefox. Many core parts of Firefox have been replaced with Rust implementations.