Ublock Origin does not block "malicious Javascript" reliably. You need NoScript for that, and a opt-in approach. Block everything, unblock what you need, hope its not malicious.
I mean, I think their global search is not that useful, while their inline mail list search is. So I have a cluttered UI with 2 search bars, to supplement the incomplete inline search.
Only foreground apps and keyboards can read the clipboard, which is a really good thing.
KDE Connect could partner up with Florisboard or Heliboard/Openboard, and integrate that sync. The keyboard takes it up and sends the content to KDE connect via IPC (inter process communication), which is still not blocked through the Android Sandbox, not even on GrapheneOS.
Electron runs a core Chromium Browser + NodeJS + a bit more.
Unlike Chromium itself it is not backwards compatible and removes a ton of things like its sandboxing capabilities.
I am not sure how it is less secure, but it may use more RAM (also not always but generally yes of course), doesnt allow hardening (unlike android WebView apps) and breaks LD_PRELOAD-ing another memory allocator.
This is only a big problem in special cases, in general it makes apps strictly dependend on GNU glibc and others, no idea how it works on Alpine or others (that actually try to make a secure system).
If somebody knows more about security concerns about Electron, please add.
There is an unofficial Thunderbird nightly Flatpak, that will likely reveal what the hell they are doing.
So Supernova is kinda nice, mainly a big overhaul of the underlying stuff, making it easier to maintain.
It lacks a ton of things like Threads (the addon TB Conversation works though). Also their "spaces" bar is useless, as it just opens tabs, so it is redundant. Good idea, but only if it could replace tabs.
Their search and filter stuff is still the same, really bad. Either displaced in the message list column, as the global search still opens a new tab which is kinda bad UI.
Some addons broke too, not a big deal though.
I have the feeling they removed nested filters, which is extremely bad, but filters still work.
Note: Find it ironic or not, but to query the list of all Google IPs/subnets, this needs to contact one Google domain, actually. (That request does not emit a sound, though.)
And I would ask DDG how their "tracker blocker" works and if it would also block such requests.0
Just change and reupload :D