That seems too harsh a penalty, it makes using an additional PU likely to mean starting from the back for ~5 races. It'd also hurt smaller teams worse - if your average qualifying position is 16th you'd be starting from the back for about 12 races.
Botnets targeting android devices are a thing, here's an example: https://blog.fox-it.com/2023/09/11/from-ermac-to-hook-investigating-the-technical-differences-between-two-android-malware-variants/
In this example, they're renting access for thousands of dollars. These people have a clear motivation to find ways to exploit devices and unpatched CVEs are an easy way for them to do that.
Try it. The worst that happens is that it makes things slower and then you turn it back off.
They pay Microsoft for access to the bing index
The x390/x280 are the same era as these but smaller, so might be a better fit here. The X390 has soldered RAM though, so I'd look for the 16GB version if you can find it (there's not much of a price difference used)
I wouldn't wait that long in the hope that Google release another Pixel tablet and that it then fixes the issues you have with the current one. IMO there's too much risk that either they don't release it, or they don't release it at the time you're expecting, or it doesn't change things you care about, or they change the price/features.
I'd say buy the best (/least worst) thing you can actually get now.
Graphene OS drops support for devices pretty soon after Google does. It's not a good idea to buy anything before Pixel 6 to run Graphene OS right now (see https://grapheneos.org/faq#supported-devices)
This will get better going forward since Google is supporting the Pixel phones for much longer (5 years for the Pixel 6/6a onward, 7 years for the newest devices).
I think you're misunderstanding which ramp I mean. Looking between the wheels of the white car, it looks like there's a ramp the goes from the parking lot up on to the sidewalk. The white car would prevent a person using a wheelchair getting onto the sidewalk.
The white car isn't parked in a disabled spot. Its parked in front of the ramp for a wheelchair, which isn't a space
Changing DNS isn't the same thing as a VPN. Your traffic isn't "tunneled" over DNS, it just changes which server your devices use to look up IP addresses. Your ISP can still see quite a lot, particularly if you're using plain DNS rather than DNS over HTTPS or DNS over TLS.
The xz compromise having demonstrated that FOSS projects are totally immune to interference from state actors...