I was so happy about this! Been using it on my work MacBook and have been excited to use it on my main laptop!
Imagine being so against people using certain programs on their computer that you straight up deny them software updates.
Yeah, I've had issues with it too! I installed the latest Windows 10 on my mom's laptop after replacing the hard drive with an ssd, and it took me way longer than it should have to do something as simple as move files from the old hard drive to the new one! And a week later, she calls me with issues related to the auto backup OneDrive thing, and I had to troubleshoot that from 2.5 hours away. If she didn't need Photoshop and Lightroom, I would have installed some sort of Windows-similar Linux distro for her. I also have had so many issues with Windows 11 for school that I just stopped using it on bare metal and just have a VM for the one program I need for my CS classes.
I've never had issues with APKPure as far as safety goes. That and APKMirror are my main places to get apk files
As someone who has been plagued by broken, hard to repair laptops before, I went for the Framework Laptop. Of course, your needs and wants might be different.
System 76 laptops are probably a bit better for Linux considering they were built specifically for it. They also have more variety in what kind of laptop you can get, whereas the Framework only comes in a 13 inch "ultrabook" form factor and a future 16 inch gaming laptop. And battery life I believe is a bit better than the Framework.
However, Framework still works really well with Linux (I use Linux Mint on mine, and it works great.) And the flexibility in being able to repair, upgrade and customize your laptop is really nice. Plus, the battery thing is slowly but surely getting fixed, and while it's still not entirely great, it has gotten me through the day as a computer science student.
My understanding is that it's just not as secure. Any open port can be considered a potential way for a hacker to get in. Of course, that doesn't mean it will 100% happen and you will get hacked, but at least in the case of Tailscale, it does it in a secure way that makes it so you don't have those open ports. Basically, it's not bad to just expose them to the internet, it's just not as secure as using tools like Tailscale.
Some favorites of mine are The WAN Show, Command Line Heroes, Darknet Diaries, Linux Unplugged, Destination Linux and Surveillance Report All of these cover a lot of cool areas in tech, and I have never heard any right-wing views (or really any political views) voiced in any of these.
I'm not entirely a fan the idea of having my OS run somewhere other than my own computer, unless it's like a remote lab I use for specific tasks. Like if I could use Linux, and just use this for my classes that run Windows exclusive software, then I'd maybe use it. Otherwise I think it's a bit weird to have your whole computer basically be in the cloud.
I think a house isn't the best comparison here, as a house isn't a public space, whereas the Fediverse is. A better comparison might be a town square or a park. Anyone is welcome to be there, but if they do something bad, or it becomes obvious that they are going to do something bad, then they can be removed from that space. Otherwise they should be allowed to exist in that space.
As much as I hate Meta, I don't think it makes sense to defederate preemptively. I personally feel like doing that would be telling Threads users "if you choose to use Threads, you aren't allowed to be a part of the Fediverse" which I think basically defeats the point of federation.
I also think Threads is a good entry point for a lot of people to experience the Fediverse and move to other platforms such as Lemmy or Mastodon.
That being said, if Threads proves to be a huge problem down the road, beyond it just being Meta-owned, then we can defederate. Otherwise, we should wait and see. I think the Fediverse is big and strong enough that waiting to see won't hurt us.
Debian
-Simple distro free of too much bloat without being too bare-bones
-Stable, but can also be changed to be a bit more updated if you want that instead-
Out of the options you mentioned, Pixel with a custom rom (GrapheneOS, CalyxOS, etc.) is probably the best bet. Seconded by any Samsung that could run a custom rom, though I agree with others here that the hardware is better on the Pixels. Plus they have extra security hardware features that will be better. Of course, if things are weird with your telecom, that might effect things (trust me, been there with an Ubuntu Touch phone before.)
Another option you could look at depending on where you are is Murena's phones. They have a bunch of options pre-flashed with their de-Googled rom /e/ os. Not my favorite rom, but still not bad! And of course those can be flashed with another rom if you want as well!