I guess I wasn't thinking of my primary line of defense: webapps! Naturally sandboxed and least privilege'd. And many of them are locally selfhosted in containe

I guess I wasn't thinking of my primary line of defense: webapps! Naturally sandboxed and least privilege'd. And many of them are locally selfhosted in containers too. Native apps for me tend to fall into a few narrow categories: * Professional software engineering tools * Videogames (on a Steam Deck these days) * CAD for 3D printing (FreeCAD) * A/V editing with Audacity, Gimp, etc