I don't see why we are a long way away. At the sandstorm end, we need to get to the point, where all updates (of both sandstorm and the apps) on the user machin

I don't see why we are a long way away. At the sandstorm end, we need to get to the point, where all updates (of both sandstorm and the apps) on the user machine are automatic. Much like they are automatic on various OSes (mobile OSes in particular but also MacOS/Windows). This is not impossible if a single OS like Debian-testing is targeted. Mailinabox [1] almost does it. They target Ubuntu stable, and upgrades are mostly silent. But they needed user intervention when Ubuntu had to be upgraded from 18.10 to 22.04, which was quite challenging. If sandstorm can get there, then putting it into a RPi box is simple. What's difficult is helping the general public understand the importance of protecting their data, so such a product has a reasonable market. [1] https://mailinabox.email/ https://mailinabox.email/