No personal experience with it but this project seem to be interesting for your use case and have a docker so it's easy to test: https://github.com/filebrowser/filebrowser
I agree that the descriptors have to change. It's insulting to linux beginners when you assume they're illiterate non-it users that can't read the paragraph explaining the install options.
You will be able to get GNOME as the default desktop environment in many distributions and then install what extensions you want to change both appearance and function: https://extensions.gnome.org/
Are you looking for a laptop or a desktop machine?
Framework laptops seems kinda cool but they don't ship to me yet so I have no personal experience. https://frame.work/
Many computer stores offer to build your computer from parts for a fee, that would give you the custom PC without building yourself.
Your opnsense will have WAN (ethernet port) and your LAN side will be all virtualized. There's no problem having VLAN 10 with 192.168.10.0/24 for your main vms and then VLAN 20 with 192.168.20.0/24 for your VPN machine. Setup deny rules in the firewall to stop the VLANs from communicating.
If this is inside your current home network you will end up with double NAT though.
I find many programs meant for servers and businesses have no problem being CLI installed, though the install is most often installed silently through intune or group policy when that's the case.
Definitely rarer now, but four people sitting in the living room with controllers is still as fun. Helldivers, Magicka, Overcooked, Totemori, Gang Beasts and Genital Jousting are all great fun with some being easier to get into than others.
Many use SearXNG to get less personalized search and tracking. If hundreds of users appear as one user for the search engine then both tracking and personalization of the results suffer.
I much rather fix up some burgers and drink a few pints at home while playing helldivers 1 with friends than sit at the pub eating worse burgers and paying too much for the pints.
Yeah, you need to install cockpit on any linux you wanna manage using it, then you can use the ssh keys to setup so your cockpit session on the hypervisor gives you access to your vms too.
Running a Debian Bookworm hypervisor using KVM/QEMU with virt-manager for vms + Incus for lxc containers gives you a lot of freedom with how you use it.
edit: It also means you build your own hypervisor from parts - kinda like installing postfix/dovecot/mariadb/spamassassin instead of a packaged solution like mail-in-a-box. It takes more time and effort but I find I understand the underlying technologies better afterwards.
I'm using Fedora GNOME for my pcie passthrough desktop vm and Debian Bookworm for my hypervisor and virtual servers.
When Bookworm ages I'm sure I'll mix in other distros for vm servers to try out stuff that isn't available in Debian Stable yet.
I'm also curious to set up a virtual NixOS and a virtual Fedora Silverblue/Atomic just to check them out.
No personal experience with it but this project seem to be interesting for your use case and have a docker so it's easy to test:
https://github.com/filebrowser/filebrowser