Lemongrab

I like to judge software based on its actually merit and not on the theoretical possibility it is vulnerable. It very well could be vulnerable, but without auditing it we are just speculating, which in the real world means nothing. Every project starts somewhere, without community, followers, and "5 years of support". I am not saying I would trust this software in a security critical situation, just that your speculation means nothing.

And? It lowers the attack surface of Immich. Attack surface is about the surface, whatever an attacker can use to get leverage. This acts as an intermediate between Immich and a public viewer, controlling how a threat actor can access a private Immich server. It helps reduce external attack surface while increasing overall system complexity. Since the project is small, it is easy to audit the code.

Magic Earth isnt FOSS though, which was specifically requested by OP

It would be easy. Just install Waydroid and install an android app on the Android system. Look at Waydroid official install guide and maybe watch a video.

It shouldn't be too taxing on the Pi 4 or 5, Waydroid runs an LXC container with x86_64 LineageOS. It works well, but requires Wayland.

Lol

It does not use adblock plus lists directly. The lists are hosted by Cromite. uBlock Origin is not available for any android chromium browser (other than kiwi I guess). The adblocker works well from my tests. I recommend adding filterlists from https://divested.dev/pages/dnsbl

Use Cromite. Fully open source, adblocking, and security hardened. See this browser table for conparisons: https://divestos.org/pages/browsers

Privacy.com allows you to create virtual cards, allowing you to set up rules for how money can be used through them. It also masks the receipt details that your bank would normal get access to so they can't sell that data about what you purchased.

Notesnook has a desktop app. Does it not work with self hosted implementation?

Some/most places outside the USA heavily rely on WhatsApp for communication. This is like saying "you dont need to be able to talk with your friends, family, or employer"

Basically, Flatpak stops Firefox from using its normal security measures for isolation. Librewolf (a fork of Firefox) has the same problems resulting from Flatpak.