Get a mainboard and CPU supporting ECC ram. Combine it with ZFS as the file system. With this setup you are safe from bitrot.

So what is a better paradigm in your opinion?

Setters and Getters?

True, but I thought we are talking about security here…?

How would is a typo possible if one is using a password manager?

Tell me

Did you read my message? After one failed attempt you will get banned.

30 character password + fail2ban after one failed attempt. Why not?

Create a sudo rule which allows the user to run only this exact command: “sudo docker restart mycontainer”

Agreed, you also lose the info about the resolved merge conflicts during the merge (which have been crucial a few times to me).

Problem with Joplin: The raw files are randomly named so you can’t easily find a specific note