Using the Yuzu case for guidance, dumping encryption keys, regardless of the source of those keys, is illegal
This is false, as the case is non existant, because it has been settled out of court. It has to be proven in court that is illegal, as there’s no law that says that dumping the keys from my own hardware that i paid with my own money is illegal.
Debian on auto update with minimal packages lasts for years
Another option that I’m using is this: