Can confirm, mine is touch-enabled. Forgot to mention that in my post. Model 20UD-003KUS

I just got a Lenovo T14 Gen 1 with a Ryzen 7 4750U (I think that’s around 11th gen on Intel?), 16GB soldered RAM as well as an open slot to add more, 14" screen (on the larger side of your wishlist, I know), and it was $300US on eBay. It’s been fine with Linux Mint running Cinnamon as my daily driver right now, and also fine with other related OSs like vanilla Debian and Ubuntu. Have not tried with Arch, btw, but these T-series machines have a pretty good reputation as far as I know in terms of Linux ease-of-use.

This is the way I’d go if it were me. Debian minimal, add in unattended-upgrades + rkhunter + fail2ban + ufw to keep it locked down, and then set it up as a kiosk for whatever I needed (something like here: https://github.com/PhilGoud/xfce-kiosk )

Nice, I was unaware, thanks!

Been moving over to LibreWolf and I’m pretty happy with it so far. I added NoScript and CanvasBlocker extensions, along with my password manager, and I’m getting settled in with it now.

deleted by creator

Truly one of the latter day saints

It’s a described feature of a paid service though, so it goes a bit beyond just being nice. More importantly for me, the app also leaks memory insanely, at least in the latest Debian build. I spun up a Windows vm with ProtonVPN because the Linux experience (which, again, I pay for) was too frustrating