Wow a faraday cage is needed then… :(

It’s 1984 for sure. Every devices listens.

Yeah untrusted devices should run in a client isolated vlan similar to a guest network.

Yep an isolated vlan with no internet access. Cast your media from a dongel or computer connected via hdmi.

Thanks for your experience, it’s easy to forget have stable debian really are and glorify nix as the one config to rule them all. Backports and lts kernels vs a four weeks update window are miles apart. I should go back and enjoy all my systemd services and sync/backup scripts instead.

But the urge still tickles, hopefully I can contain it inside a vm :)

I have the same problem with NixOS and Debian.

Currently every family computer and server in the house runs Debian 12 as a base. But the urge to convert everything to Nix one day still tickles me, who knows someday…