You can always use APT Pinning to grab GIMP and its dependencies from testing without touching the rest of the system.
Or you can just run testing or sid as your base system. My gaming rig is based on testing but pulling Mesa and video derivers from experimental and sid and I haven’t had any issues with it. Been running it for about 2 years now this way.
Unfortunately no support for Ecovacs.
Plex supports that natively.
https://support.plex.tv/articles/sync-watch-state-and-ratings/
The public keys can be stored anywhere, it doesn’t matter. That’s why they’re called public: because they’re not private, they’re not sensitive, they’re not a secret.
That makes zero sense. Where did you get that idea from?
For reference, here are their docs describing key management. https://tailscale.com/blog/tailscale-key-management
I found Tailscale to be easier to install and configure than ZeroTier, and also to have better performance.
I have never used Twingate.
The web app works fine. The desktop app is Electron-based but works fine. Yes, it is all centralised on their servers.
In which sense do you fear it will be invasive? Other than Slack seeing your messages on Slack, I don’t see what else you could be worrying about. They will always have that kind of access regardless of what you do locally since it’s not E2EE, so really this question just feels like paranoia.
Don’t say things on Slack that you don’t want Slack to know about. That should be all, really.
If you don’t want Slack to see any of your messages, don’t use it.
On servers, I agree. OP just wants a recent version of GIMP though. Production can mean many things, and dogmas are never the answer.