The part how they cloud technically access all relevant files, seems easy to me. As mentioned in other comments, just give someone or somewhere you trust your master password.

Virtually impossible, that my dear ones actually can make any use of this. They don’t even know how to use a command line, not to mention how to decrypt a luks partition. In the end, they will get some linux friend to do this, copy all files on a nfts external drive and hook this up to a Windows machine. So glad, I don’t have to experience this monstrosity anymore.

I am using IceWM for like 20 years now. Fingers crossed they didn’t change too much.

To add some points, that I do:

• Proper logging: So I could realize something unusual is going on
• rootless podman container: harder to escalate privileges and gain root
• Apparmor: same, plus it could trigger suspicious log entries

If a firefox add-on is okay: Brief

Frag mal deine Großeltern. In deren Jugend hat ein Döner nur 2 Reichsmark gekostet.

True

Ziemlich guter Podcast zu dem Mord an Burat Bektas ist vom RBB “Wer hat Burat erschossen?”