It would be easy. Just install Waydroid and install an android app on the Android system. Look at Waydroid official install guide and maybe watch a video.
Lemongrab
It shouldn't be too taxing on the Pi 4 or 5, Waydroid runs an LXC container with x86_64 LineageOS. It works well, but requires Wayland.
It does not use adblock plus lists directly. The lists are hosted by Cromite. uBlock Origin is not available for any android chromium browser (other than kiwi I guess). The adblocker works well from my tests. I recommend adding filterlists from https://divested.dev/pages/dnsbl
Use Cromite. Fully open source, adblocking, and security hardened. See this browser table for conparisons: https://divestos.org/pages/browsers
Privacy.com allows you to create virtual cards, allowing you to set up rules for how money can be used through them. It also masks the receipt details that your bank would normal get access to so they can't sell that data about what you purchased.
Notesnook has a desktop app. Does it not work with self hosted implementation?
Some/most places outside the USA heavily rely on WhatsApp for communication. This is like saying "you dont need to be able to talk with your friends, family, or employer"
Basically, Flatpak stops Firefox from using its normal security measures for isolation. Librewolf (a fork of Firefox) has the same problems resulting from Flatpak.
Also, what do you mean the distro repo will update never? You just type the update command (eg. sudo dnf update -y
) and software gets updated. If you dont like manually typing command, just set it up to auto run at boot.
Flatpak doesnt let the browser use its normal sandboxing for process isolation using user namespaces. Read more here or search on the web for "flatpak weaken browser security": https://discussion.fedoraproject.org/t/security-problems-with-flatpak-browsers-firefox-chromium-bubblejail-seccomp-user-namespaces/121109/5
Magic Earth isnt FOSS though, which was specifically requested by OP