Good.

Even if you computer is not exposed to the internet: are you certain that every other device on the network is safe (even on public wifi)? Would you immediately raise the alarm if you saw a second printer in the list with the same name, or something like “Print to file”? I think I personally could fall for that under the right circumstances.

Why the password.trim()? Silently removing parts of the password can lead to dangerous bugs and tells me the developer didn’t peoperly consider how to sanitize input.

I remember once my password for a particular organization had a space at the end. I could log in to all LDAP-connected applications, except for one that would insist my password was wrong. A trim() or similar was likely the culprit.

Is this a threat?

“Safe” being defined in a user-hostile manier, i.e. with unmodified Google components and not rooted.

“Google-controlled” would be a better word.

“I dropped my fair share of hard Rs back then”

With this approach you would lose the subvolume structure and deduplication if I’m not mistaken.

Obviously acquiring publicly available data is legal

Under the EU GDPR it is often not legal. Controllers need a legal basis, which only exists if there is an appropriate relationship between the controller and the data subject.

No, you got downvoted because you were insulting and incorrect.

The most common physical attacks will be you misplacing your device or some friend/burglar/cop taking it. FDE works great in those scenarios.

The uMatrix add-on for Firefox seems to do what you want.

You can’t just compare the file sizes without looking at the quality. Each will have different quality loss depending on the exact encodings used.

Key servers can be dishonest, so you need to have another way of verifying that the key you receive is correct.

This is fake

What is “southern Ireland”? Do you mean Ireland?

Yes, it is generally a good idea to put internet-facing servers on a network that is separated from the local network. The point of this is not to minimize their attack surface (since they are already connected to the internet after all) but to prevent them from being used as a stepping stone for attacks on your internal network. To make this effective, you should block traffic from the internet-facing network to the rest of your network and treat it as potentially untrusted.

raid is essential anyway

Why? If there are offsite backups that can be restored in an acceptable time frame, what’s still the point of RAID?

It seems like this order is rather limited and the IA can continue almost all of their work.

“A brief search showed that the applicant gave false statements in their VISA application form, in violation of 18 U.S.C. §1546. Lifetime ban applied.”

Why not?