Natanael

Blackwater will never hear the end of it

Actually the risk of that should be lower

LinkedIn tried blocking scraping that way but as long as the scraping isn't burdensome it's basically legal but you can still be bound by TOS and civil claims

https://natlawreview.com/article/hiq-and-linkedin-reach-proposed-settlement-landmark-scraping-case

He'll have to handle the hardware for his parents, they're treating him firmly

If you get root on the device you can MITM it by extracting session keys

That depends entirely on the auth system, but you can use a separate credential to retrieve the password (using something like a PAKE algorithm)

They don't need to, they already use overprovisioning for bandwidth.

It's only in rare cases where the backend is so old and limited that it only supports a specific maximum number of active clients that they do that, and I've only heard about it in rural areas and similar places

OpenStreetMaps clients also works and are available everywhere

Store absolute time in something like Epoch (seconds since 1970-01-01) plus local time zone

Ear criminals? Are their covers that bad?

You get used to it. I don't even see the code

Hacking is the entire process including figuring out if something is or is not rare limited