https://github.com/ente-io/ente

Fully open source, End to End Encrypted alternative to Google Photos and Apple Photos

1. Easier installation.
2. Mint configuration of desktop settings
3. Mint tools (Warpinator, Hypnotix)

But where to get the AppImages from? Who’s maintaining? How to do Security Vulnerality Tracking for them?

I don’t get your point. Why should somebody do this every day?

As the experience from other users in this thread, it seems not extremely rare to have an overgrown ~/.cache/ folder. So checking it from time to time is a good advice. If we all do this for a time, and create bug tickets for software which is not cleaning up. Then this problem will hopefully go away with future software releases.

Because some users experienced accidential grows like OP had 160 Gbyte. So general advice for linux users can be stated as: Check your ~/.cache every now and then

Critical systems/servers shall better be monitored as you suggest.

not necessarily during runtime

So OP’s headline should be saying instead: Reminder to CHECK your ~/.cache folder every now and then

I always felt that there should be some user directory like /tmp/ which will be wiped regularly.

Is it safe to clear ~/.cache/mozilla/ while Firefox is running?

Can the Fedora Flatpaks be browsed and downloaded for other distros?

Even if you have trust. There can be security vulnerabilites in apps we are using. Flatpak seems to not really help in any way.

Think about service providers (government, banking, messaging, streaming, gaming). To participate in life we might depend on some of their services but don’t fully trust these parties. Flatpak is not secure/sandboxed enough to run untrusted apps. Meanwhile on Android the situation looks much better.

Problems:

• you need an additional solution for Wifi captives portals, at least there is a gap in your solution for this situation
• intercontinental travelling might not be fun

That doesn’t help outside of home. When we are in an untrusted network then the DNS mess makes us vulnerable for spoofing attacks.

Does it also follow the rule to not allow closed source API? (Notification,Location,…)

that one does support autostart?

I dont know how to mount external drives on Bash without root privilegues. On the Desktop environment it can be done by just clicking without root password.

Which server are you using on linux? How did you configure autostart?

Isnt Remmina a client only? Or can it be configured to autolaunch a VNC/RDP server?

What is wrong with it? (I have no clue, never used it)