I agree however having a fully secure stack that you can fully audit is very challenging. I guess you could get pretty far with MIPS but even then you would have to trust the NIC/WLAN and motherboard.

So to a certain degree we're always compromising. Cloudflare is compromising a lot.

How far could you go with using claw via telegram as the only exposed outside connection?