I have a Bambu P1S with an AMS after years of using a Ender 3 that was modified to high heavens both on hardware and on firmware level.
It is a perfectly fine product and the AMS makes filament changes so much easier, it is a convenience that I personally love.
My P1S is running in LAN mode and it works perfectly fine in combination with OrcaSlicer on my Linux machine.
No data is send to the Bambu Cloud, everything is local.
Would I like the possibility to have a custom firmware on it? Sure, I always like options.
But to be honest: My P1S runs better, smother, faster then my Ender 3 with his many mods and custom firmware ever did.
Is Bambu on my list of manufacturers for another printer purchase? Yes, but near the end after their anti consumer behavior lately.
To test this you need an external observer who can register every quantum outcome and therefore can see/measure in every quantum reality.
How else would you get verifiable and reproducable data?
We are very far away from such a possibility, we don't even know for sure if quantum theory (or which one of the many specific quantum theories) in general or the many worlds interpretation in speciality is even correct or not.
Tinkering, in my personal definition, would mean installing third party repositories for the package manager (or something like the AUR on Arch) or performing configuration changes on the system level..
Just keep away as most as possible from accessing the root user (including su/sudo) is a general a good advice I would say.
My Arch Linux setup on my desktop and my servers are low-maintenance.
I do updates on my servers every month or so (unless some security issue was announced, that will be patched right away) and my desktop a few times a week.
Nearly anything can be low-maintenance with the proper care and consideration.
For your constraints I would use just use Debian, Alma Linux or Linux Mint and stick with the official packages, flathub and default configuration on the system level.
Those are low-maintenance out of the box in general.
I only bind applications to ports on the Internet facing network interfaces that need to be reachable from outside, and have all other ports closed because nothing is listening on them.
A firewall in this case would bring me no further protection from external threats, because all those ports have to be open in the firewall too.
But Linux comes with a firewall build in, so I use it even if it is not strictly needed with my strict port management regime for my services.
And a firewall has the added benefit to limit outgoing network traffic to only allowed ports/applications.
Loading BPF code from user space is, I hope, only possible with root access to the system.
That would mean that an attacker needs root access to exploit BPF, but if an attacker has root access what stops him/her to do anything they want? At this time the system is lost anyway.
Yes I can.
But I am a Linux system administrator with 20 years of experience.
This should not be the level of measurement for stuff like this. 😉
What I meant was: Don't put a Microsoft master trusted authority in the Kernel, unless one chooses to install a Microsoft distribution.
And don't go the SSL/TLS way with the huge number of default authorities that get installed on every system.
It would be a pain to be forced to always build my own Kernel again just to keep Microsoft or any other institution/company that I find untrustworthy out of it.
Not everyone will be dead, because the villain himself lives and when he breaks the honor code he will be ashamed of himself for his hole life, always haunted by the memories of his disgrace and his lack of honor.
Or any other bullshit explanation like that..
Yeah, the evil villain should be evil and ignore all the honor code rules.
Making errors and analysing them to figure out what went wrong and why is a huge part of learning. You can only learn so much from theory, some things can be learned best by trial and error and the experience gained from it.
When I started with Linux I did choose to use Gentoo Linux because it was the most complex and complicated option, so I had the most opportunities to learn something by ducking up!
I will look into that too, thank you for the suggestion