Yes, bloat and mission creep is going to be an issue with any big non-profit. But maybe that’s also their advantage: any organization that becomes focused on sustaining itself is going to provide decent long-term stability. I guess it’s a bit like a state.
Specifically, the model should be the Wikimedia Foundation. That is, a non-profit organization with lots of stakeholders and slow procedures to guarantee accountability, and lots of resources to guarantee it won’t go away. This is the pragmatic least-bad solution to the problem of centralization on the internet.
So, biometrics, master password, and USB key - 3 whole options and 3 things I personally will never be letting near Android. Unwarranted caution, no doubt.
Not bothered about the potential for keyloggers or even OS-level snooping on what is presumably your privacy-free Android device? Personally I would never type the master password into anything other than a computer running a FOSS stack that I control, but perhaps that is excessive caution.
If Fail2Ban is so important, why the h*** does it not come installed and enabled as standard?!
Security is the number-1 priority for any OS, and yet stock SSHD apparently does not have Fail2Ban-level security built in. My conclusion is that Fail2Ban cannot therefore be that vital.
Your frustration is warranted. I consider mapping to be the major unsolved problem in the FOSS universe. It’s certain my one, and I have much more limited aims than you. I just want my personal POIs on a map, in colored categories, with access to that map on desktop and mobile, read and write. I’ve gone with the serverless route, just syncing the two devices, but the Nextcloud method is not so different.
Well, it’s hard. Osmand is amazingly powerful, and apparently has the most advanced POI features of any Android app, but still there are catastrophic flaws. For example, in the GPX it marks up POI categories with its own bespoke GPX markup - totally invisible to desktop software (I had to write a Python script to add it to POIs created on desktop, just so that I can actually see their colors in Osmand). Next, syncing the GPX is made unnecessarily cumbersome by the fact that all the DB files and cached tiles are in the same file tree (I literally use an Android file sync tool to sync the GPX within Android to a place where it can be synced again with my desktop).
What a mess. Pretty sure I haven’t overlooked anything for my simple use case of POIs-on-a-map. It just seems not many people want to do this. Or perhaps they tried and then gave up.
Oh well. This rant is not much use to you, but please accept it as consolation.
But rsync can do this fine with --recursive --delete. The mirror will remain an exact replica.
What should they be doing instead? Begging for donations? I do agree in general, tho. Seems they should at least be squirreling away some (or most) of that money into a foundation, because they’re obviously going to need it one day.