Thanks.

Firewall. Ufw works fine as long as docker isn’t involved, which isn’t a Ubuntu nor ufw issue.

Information stealing: that’s true. One needs to get rid of some bloat.

3306. What did the system itself say? Interesting. It didn’t happen to me.

Packet maintenance seems to be an issue when eol is reached. But this cve is the first bigger issue for me. Their efforts to build an own app ecosystem based on snaps is bothersome. Luckily there is no real lock-in. I can switch to Debian if needed. It just takes time.