Not only is UPnP a security risk, it’ll work only if a user has an IP that can expose ports. IPv4 addresses are becoming rarer on home networks and CGNAT connections can’t expose ports even if one turns on UPnP.

Sure, yeah, taking on the Pixel without specifying the number of years of OS and feature updates and without GrapheneOS support. Pretty good title for the post

There isn’t one. Maybe Fairphone 5 but even with custom ROMs, running Play Services as a sandboxed user app isn’t possible. And even vanilla iPhones can’t be as privacy oriented as GrapheneOS is.

It would be a default on almost every distro that follows XDG specifications to have stuff like Downloads, Pictures, Videos in the $HOME folder. One of the first things I do as part of an installation is to modify ~/.config/user-dirs.dirs and set a specific folder, say /data/downloads or ~/downloads, for every XDG base directory.

using capital letters in file/directory names on Linux :|