True enough.

If you don’t need stuff publicly accessible, and just need it accessible to you, then set up a small computer on the network as an ssh Bastion host/jump server, put it on a VPN connection with a VPN provider that offers dyndns, forward the ssh port through the dyndns, and then off network, reverse proxy in with socks5 via key based ssh -D to gain access to all the services available inside the LAN.

Been doing this for a few years, works great and no one is getting in without my ssh key.

I really like Debian stable, and have for a very long time. I’m not too fearful of fucking up the system because Debian stable is more stable than most anvils, and I have timeshift installed with regular backups configured which get stored locally and to a RAID 5 array on my NAS system (which is also running Debian). Anything super duper important I also put onto a cloud host I have in Switzerland.

If I want to do something insane to the system, which is rare, then I test it extensively in virtualization first until I am comfortable enough to do it on my actual system, take backups, and then do it.

I am working to make my backup/disaster recovery solution even better, but as it stands I could blow my PC up with a stick of dynamite and have a working system running a day later with access to all of my stuff as it was this morning so long as a store that sells system hardware is open locally. If it were a disk failure, or something in software, It would take less than a day to recover.

So what keeps me from switching is that I really do not see a need to, and I like my OS.