agreed. this is part of the reason i have separate VLANs for my server, IoT network, Management network, guests, and home computers. I also consciously try not to use programs like Chrome and all my traffic goes through OPNSense/Unbound DNS.
i realize not everyone has the equipment for / can do all of that though. And that despite all of that and more, I’m still compromised to anyone with dedication. or a fucking ai
short answer (and the safest one) is yes, use HTTPS always.
However, if and only if a service you are using is confined locally or via your privately hosted VPN (this just means not available over the public internet) you are probably OK without, unless there are other people on your local network who might be interested in snooping.
with your VPN (looks like netbird in this case) you should be OK, as the VPN handles encryption in the absense of HTTPS.
For more research checkout LetsEncrypt. its a super simple way to setup SSL (Which generally makes up the S part in HTTPS) and it’s free.
i think many of us started like you. you’ll get there, you’re just about to learn a lot of stuff before you do.
homie has like 10 accounts and they’re all spamming multiple instances / communities. report them when you see them please.