in case you can't stand the snap business go fedora, add rpmfusion and poke around. if everything works, you're set.
two possible issues with resume from sleep. if your wifi won't come back, use the script from t2linux. if your laptop won't wake up expeditiously (takes a while), come back here and ping me and I'll dig up the the script.
stay away from mints and xfces and friends as you need wayland (so, Plasma or Gnome) for fractional scaling, gestures, seamless dock/undock, etc.
my annoyance with his output aside, can we make it so that you can't use "beautiful" on your own shit? others can say your stuff is, you can't go "I created a beautiful xy".
tbh, looked at the thing some while back and noped out when I saw "java" in there; absolutely irrational, I know - just can't stand the thing. cool that there's an alternative.
don't know about that latitude, but for the thinkpad you'd do well to disable the nvidia graphics in BIOS setup. intel graphics is adequate for daily stuff and you can actually use the thing as a mobile device i.e. on battery,
mint uses X11 which should be considered legacy at this point. wayland (Gnome, Plasma) has all the touch and dock/undock and rotate and pen etc goodies. try it out from a liveUSB and decide for yourself.
I used enpass for years and was a happy user. one day it prompted me for some re-authentication bullshit security theater. although in that instant it was an easy task, took me all of 10 seconds, it demonstrated a scary amount of power they had as I couldn't bypass it and access my data. from that point on, its days were numbered.
the second issue is the export functionality that was seriously lacking and I had to resort to 3rd party converter tools to convert it to keepassXC; no way that flew by their QC, it had to be intentional.
it's by design, those are harassment tactics. there is no way that you can add a correspondent as "safe" and someone you want to receive comms from, even if you've communicated before and/or you have them in your address book. they want you to use gmail, not email.
you're running way too old a distro for what you want. debian 12 has its merits as a server, you install it and leave it be and it just works.
what you want - fluidity with power management, dock/undock, etc - although achievable with tweaking this and that isn't being worked on, not on X, not on debian 12, so it's not like those things will eventually get there. so you need a semi-modern distro, like ubuntu or fedora or even trixie.
wayland isn't new, it's default on a lot of distros since 2021 or so, so you can be sure that your use case was previosly met and solved. costs you nothing to boot e.g. F42 off a USB and try it out (has to be 42 as earlier live sessions default to X11). if you have lots of RAM, add the rd.live.ram switch so it copies the image to RAM and everything is super-snappy for testing and it doesn't touch your SSD.
good start, but in the next iteration (as you're the dabbler) try to replace tailscale with wireguard. the majority of that stack is not needed for your scenario, and you'll also not dick around with authentication and such.
disable network comms for Gcam and install the magisk module that fakes the necessary services are installed (play store, photos) and you're good. the opensource variants are lacking, to say the least.
I'm like a test-bed for a) my business customers and b) friends and family. also, "wasting" time thusly is vastly better than my previous "hobby", namely buying new and exciting shit.
my customers benefit from me knowing how exactly (and why!) I should implement e.g. an unbound instance on-premise. or an in-house prosody communication platform. or the "dev team" (buncha dudes poking at wordpress) getting a slew of used elitebooks with linux for the price of one new windows-with-ai yoga the spec initially called for.
f&f benefit from my early adoption by way of trickle-down tech. no way is anyone of them going to selfhost all this crap, but they get sprinkles of benefits in the form of "get this phone with that OS with those apps" and they're dramatically better off. you don't need the new ideapad ryzen that's "on sale" (isn't), have this 10-year old macbook I fixed and installed linux on - off you go. you don't need the new phone that's "free" with an exorbitantly priced plan, have the cheapest plan with this Redmi/Poco phone I swapped the battery on and installed LineageOS.
as to practical considerations, any and all interactions with the likes of FAANG are and should be adversarial from the get-go, they are out to hurt you by any means necessary. them fucks lost the benefit of doubt ages ago so you not letting them have a millimeter of grasp in your domicile should be your primary task. as their gains are cumulative in nature, every battle won is significant and you'd do well to remind yourself constantly of that.
it's using mpv under the hood, so I guess it should be able to play audio headless. I'm using allcast to cast to it and control it.