I didn't tested it but according to the site you can get from https://github.com/ventoy/backend/releases an image with _casper-rw.dat.7z suffix (for Linux Mint) and extract the 7zip archive
It's 2023, we are almost already at Passkeys and you skipped TOTP (basically that "Google Authenticator" does) as 2FA?
anyway there are a lot of open source TOTP apps available to choose from like Aegis or if you want to sync it something like Bitwarden (Premium or Vaultwarden)
desktop apps also exist but that would defeat the point probably
stay away from proprietary apps and do backups of these TOTP secrets or you'll absolute will lock you out if you loose your phone somehow
oh there is a way without the user accessing it espcially on Windows: Anti virus scanner
since most of them scan all downloaded files a zero day exploit for these software might be automatically executed
bonus points: Anti virus software typically has system permissions too
Steam Proton (which does the heavy lifting of running windows games on linux) includes DXVK/D9VK/VK3D3 which translates Windows DirectX games (don't work on Linux) into Vulkan (which works on Linux)
not having Vulkan will result in falling back on the way older DirectX -> OpenGL translation which not many actually care about nowadays and hasn't been opti.ized to run well in years (awful performance)
at least CalyxOS does support older Pixel phones aswell as the Fairphone 4
of course from a security standpoint older Pixel phones are less secure but still way more than outdated stock android while also saving on ressources (money and ecological wise)
it's not complete black and white, there are nuances between which favors one over the other
the archinstall script covers part of this too but I really recommend this as second most important ArchWiki article to literally every Arch Linux user
if you fear issues then setup automatically snapshots of your system
anyway I'm running monthly updates on my Arch Server for years
just don't forget to reload your kernel modules upon a kernel update (or just simply reboot)
The "issue" of rolling releases is what you need to update ALL packages at once
only updating a part of them or installing a new one without updating anything else might lead to some issues like mismatching dynamic library versions (=the software won't start)
Voyager recently got added to F-Droid but can also be used as PWA from a web browser but personally I'm currently waiting until Infinity for Lemmy actually will get it's first stable release
I didn't tested it but according to the site you can get from https://github.com/ventoy/backend/releases an image with _casper-rw.dat.7z suffix (for Linux Mint) and extract the 7zip archive