Unsure but you could check out bitwarden for your second question

Yeah that a good idea! Will look into it . Must get some self hosting going :)

Sure , got a Foss Whatsapp client laying around?

Exodus

Yeah thinking of some self hosting later , but need to fix my main PC first. Managed to botch a dual setup and lost a ton of stuff…

I do have dns filter on the vpn server but no controll over the lists. DNS solutions that use the VPN won’t do it. I can of course change DNS server (and I’m gonna setup Adguard on my extra glinet router once they fix their botched firmware update) question is if trackers use more than publich IPS and doesn’t change. An updated list would work I guess.

Same as stock , a bit extra with minor updates. After that either upgrade if you want a secure device or install calyx, lineage etc otherwise. It’s in the FAQ https://grapheneos.org/faq#supported-devices

New pixels have 7 years official support.

I have done a lot of pixel repairs and GOS installations . Pixels are glued shut. It is repairable but it is quite sure to say that the screen will break if removed , it’s kind of like removing two eggshells glued together. Requires a lot of patience and luck to do it without breaking it. Once in it’s not harder than any other phone. That said my own has a a 40 euro case to avoid the issues of repairs, I recommend that. Screens are 100 + euros nowadays. So repairs is rarely worth it. Depends on the price you can get the parts for it.

Batteries can be replaced but takes some work and hot air gun to remove glue.

For GOS yeah that’s what you want it’s the best. And I do everything from debian distros.

Don’t use aurora. Instead install GOS implementation of google play on a separate user profile if needed. The user profiles are a lot better sandboxed than regular user profiles and the gapp implementation better than aurora. And most things work without it also.

GOS gets more support than regular pixels but are recommended to not trust after pixel official updates end. For the new ones it’s 7 years. Usually GOS gets a year extra of minor updates. Check the FAQ and device support on https://grapheneos.org/faq

I use mine for nearly everything. And there are either FOSS apps from FDroid (and additional repos) or just use the mobile website for non Foss stuff like banking. There are a few exceptions , like Whatsapp that I need but it have fewer permissions and no access to contacts ( there’s a Foss app as helper for that as well) . Your headphones will work fine.