Nyfure

No, then they only handle your DNS setup, which is still okay in my eyes.
Its certainly far away from scanning all HTTP traffic. Not to forget the juicy metadata they get about the users across a big chunk of the internet, perfect tracking machine in a neat package with easy access by the government.

Convenience will kill the cat

Good points.
Although I have flown a few times on low-cost airlines in Europe, most of them also don't care if you don't test your luck with your carry-on.
They often don't have enough time for thorough checks anyway. I got checked once, and it was fine.
I often prefer to place the carry-on in the hull when offered (personal preference and a willingness to take risks).

Additionally, when flying to or from EU (and associated) destinations, you have EU Flight Rights, such as fixed compensation after certain delays.
This is in addition to the right to get any costs replaced, like hotel, food, and taxi.
There are companies that make it very easy to enforce your rights when the airline denies them. Of course, they want a cut, but either you pay a lawyer upfront or try your luck with them with no risks.

In found this often breaks sites, so the combination is still better.

Just FYI Germany likes to make things more difficult, so with federation every sub-area is separated in many aspects and has own agencies for different things..

BfDI is only responsible for health and internet-provider institutions (and a few more).
Otherwise you can send it to the one where the company is located at, or always where you are located at. (they will forward it, but that can take a few months, so better to submit where it has to go).

EU Cookie Directive applies to all website owners within the EU aswell as Websites which target EU users.

It gives clear rules for different categories of cookies like how you need to display them and for which you actually need consent to be allowed to use them.
It also sets rules for how easy certain actions have to be and granularity.
(very simplified)

The real MVPs are websites not needing a cookie banner because they only use required cookies for which you dont need a banner.

If it would be hard to do and having to bypass DRM yes, but its actually similar to what the player already does.

A court already ruled here that downloading youtube videos does not break the piracy laws by providing own means of downloading and saving the unprotected data.

Of course that does not include allowing the download feature of the client itself.

Downloading from youtube is piracy? How? If it was like a Youtube Red show, sure, but the normal videos everyone can see for free?

For me piracy begins with aquiring things or features which usually cost money to get whilst also taking into account if its obvious a thing should cost money in such an environment (thats also how our piracy laws are worded here).

So our piracy laws also classify things as piracy if it was obvious the deal was too good to be true like Windows for 2$ on eBay or chinese ROM cards for 5$ with hundreds of games.

Videos on youtube, including music, are a normal occurrence. A full blockbuster movie is usually not.

Choose the walled garden, live in the walled garden.

ublock works perfectly, anything else shouldnt be used

If its only you and you want best security, setup a VPN system. (Tailscale, Netbird, or others are quite easy)
If someone else should also, and you dont want everyone to have to use a VPN, then you can expose some services directly. Of course behind CGNat you need some third-party system to allow this (e.g. cloudflare or a rented server).

I am not a big fan of cloudflare, they are a huge centralized company, easily allowing tracking across websites with clear-text access and kinda discouraging learning how to secure things yourself (which you have to do anyways, because you are a service provider and only cloudflare is not enough if its still publicly accessible though them)
But in the end its your choice. They easily allow you as service provider to protect yourself from DDoS attacks or allowing IPv4 access when you are behind CGNat, things you just cannot easily do yourself, certainly not without costs.