Nyfure

To be fair, this is for retailers, not consumers.
And ideally you can enter the serial-number on a website and know when it was produced and sold, this should be enough for you to know if its yours or not (or e.g. it was resold)

ublock works perfectly, anything else shouldnt be used

If its only you and you want best security, setup a VPN system. (Tailscale, Netbird, or others are quite easy)
If someone else should also, and you dont want everyone to have to use a VPN, then you can expose some services directly. Of course behind CGNat you need some third-party system to allow this (e.g. cloudflare or a rented server).

I am not a big fan of cloudflare, they are a huge centralized company, easily allowing tracking across websites with clear-text access and kinda discouraging learning how to secure things yourself (which you have to do anyways, because you are a service provider and only cloudflare is not enough if its still publicly accessible though them)
But in the end its your choice. They easily allow you as service provider to protect yourself from DDoS attacks or allowing IPv4 access when you are behind CGNat, things you just cannot easily do yourself, certainly not without costs.

I have EndeavourOS, but with the nature of Bleeding Edge packages, things can break, so setup automatic snapshots with btrfs (you want this for your data anyways).

Bleeding Edge packages have the advantage of you getting the latest features, patches and improvements, which is required for some gaming cases.

i had arr in one stack and media in another.
Now in my kubernetes cluster everything is separated, but arr + torrent is in vpn and automatically uses the vpn-sidecar. And media (jellyfin + jellyseer) is separate.

This. You can also directly connect via IP address when enabled on the target, very handy.

Its probably also one of the few which have started developing Wayland support on the host side.
Currently only clipboard and video sharing works, mouse and keyboard are close..
wayland is very restrictive and things like full keyboard/mouse reading/writing need special handling (and afaik a mouse write method wasnt really available from user permissions so far)

Find the escapees, put them on the list or find a list including them for your particular use-case.
I dont have much things getting through, mostly small sites displaying things, so i just add a filter myself.

Afaik Ghostery was bought and started tracking its users.. or was that another popular extension? Happened to alot of these.. pretty sure it was Ghostery?

You can add lists in ublock..

omg.. fuck, totally forgot i could have used the printing bed for that.. used a hair-dryer, worked too

afaik it doesnt spoof the user-agent (which doesnt really hide your browser for more advanced scripts at all), but simply blocks the script responsible for checking.

Because Google apparently cannot afford to do such checks in the backend, same with the Ads, all Client-Side, no wonder we can easily bypass it.

Basically: everything is extra and this almost illegal marketing everywhere.
Go to Netcup or Hetzner if you have the money, much better quality.
Even Contabo is better, but if you cac, go for Netcup if you want best bang for buck that works.

The Lenovo Business Laptops always were super strong for me.
A bit on the heavy side (at least on the older models), but build like a tank and has an awesome keyboard.
But any halfway decent Laptop will run Linux fine.