My wife and I have done two of the book nook kits now. Trust me when I say making it an evening activity for two halves the difficulty.

The one you have done looks amazing - IMO the mistake work.

As someone who uses Debian everywhere - it’s just the opposite end of the spectrum from Arch for (non security) updates. Getting any OS into a bad state is trivial if your not paying attention. I still don’t understand why they make a rolling release version.

If you can, get a Linux work machine. In lue of that get a Mac.

If you can’t do either, buckle up cause it’s gonna get real bumpy

Odds are security is not able to fight this fight.

The MSA with Microsoft will say something along the lines of data will not leave the corporate boundary. And that will be sufficient - because Microsoft has assumed the risk.