Great Blue

If I had a dedicated NAS and a server for the services, I would choose the consistent path and keep it separated. So I would run nextcloud and jellyfin on the server and let them access storage on the NAS.

I’m in the name after location and function fraction. All but my printer, he’s named Cthulhu because printers are a menace to humanity and it supports wake-on-LAN.

In the end you would build your compiler directly in assembler, so no compiling would be needed.

But if you run your compiler on compromised hardware it would still be possible to insert a backdoor in your programs without you knowing.
To mitigate this vector you would be required to build your own chips… with self developed and assembled machines all the way down starting at growing your own silicon crystals.

And the Framework Laptop also has a switch for the mic. So even the mic can be completely turned of on the hardware level.