Post #3464011

Well, the isolation allows you select what's appropriate for each bit of data. For example, my financial data _have_ to live elsewhere - namely the financial institutions I use. I've been paying Todoist $36/year for the past 12 years and they have [zero pressure to enshittify](https://doist.com/how-we-work/no-exit-strategy), so I'm okay keeping that data elsewhere. I also outsource my email to Fastmail because it's generally inadvisable to self-host email. However, for most things that I've started using recently (karakeep, miniflux, baby-buddy, homebox, ghostfolio, and so many others), I've chosen open source apps and run their servers on my homelab. Linux on the server (unlike the desktop) is *extremely* well funded. There are a ton of different types of container and micro-vm configurations you can mix and match to give the exact level of isolation, resource, filesystem, and network access you're comfortable with. Also, I don't think it makes much sense to use proprietary software for much in the future. The cost of software development has been going down at increasing rate for as long as I can remember for a variety of reasons, and LLM-assisted AI Agents is the just the latest iteration. With the latest SOTA models, it doesn't take much to create an maintain a selfhosted OSS app - someone with the will to put in time and the most basic understanding of the basic fundamentals of software engineering. Certainly not things I would trust particularly personal or sensitive data with. But remember that breaking out of server-side containers/micro-vms is _really hard_, and way beyond the capabilities of any AI _slop_. So yeah, from what I've seen so far the best tools out there for enjoying the largest variety of software (including potentially undisclosed AI slop) _safely_ is server-side Linux containers + client-side browser isolation. The closest thing we have to sandboxes _in the desktop_ is flatpak, and it's so trivial to break out that I've watched people do it _unintentionally_, just trying to make their app _work_ in it.