I like flatpaks, kinda. If something is in the standard repo, I install it. If it’s a library or CLI tool, I add the repository. If it has simple build instructions, I build it. If all of those things are too complicated or they want me to run a script, I just install the flatpak.

Just use WHOIS protection (which should be free, but whatever).

We’re on the same wavelength lol

I recommend AirVPN. Never had a problem w/ them & doesn’t require a special VPN client.