The difference there is that apart from #2, those are all choices that someone makes.

It's not surprising. They probably considered ending phone surveillance because internet surveillance is more important.

Why would they go through the trouble of reverse enigneering your password system when there's thousands of other people who just use the same exact password everywhere? Unless someone is trying to specifically target you, it's usually sufficient to simply not be the low-hanging fruit. In case of these large password leaks, what they're probably doing is something like this:
1. Take every username (or email) and password combination
2. Through automated means, check if they are valid on other websites
3. Record the ones that worked and abuse/sell those as well.

There's even an aptly-named tool for it!

The whole "no commercial use" thing is beyond silly. What if I took some pictures with my drone, not intending to do anything commercial with them, and then later someone wanted to buy the rights to those photos? Am I retroactively breaking an FAA rule? There's far too much gray area, but that's beside the point entirely. The FAA should be regulating what can fly, where it can fly, and how it gets flown, not the reason for flying it.

Looking at the Bromium report, it appears that it's checking for various drivers that Vm programs would typically install as part of their guest tools. It looks like if you were to install something as simple as the VMware mouse driver it would think you're in VMware. It also checks for Fiddler so you could simply install that.

Exactly, it would be far more profitable for them to simply steal any saved account credentials.

All of these crypto ransomware things are actually a plot to make people associate "encryption" with something bad, so that people will stop using things like encrypted-by-default phones.

I was going to suggest something like this, but maybe with an iPad or other simple tablet. But the issue becomes supplying power to it. I have no idea if USB will even be around when this time capsule is opened, so you'd possibly want to include a schematic showing how to power the device.

How is that different from any internet communications platform? If someone hops on a random public computer, they could easily anonymously send those death threats or other nasty messages via an email, some other anonymous website/service, or even through a payphone of all things. The only thing that YikYak provides is convenience. I don't think that if there were no death threats before YikYak, that any of the death threats sent through YikYak would have any shred of credibility. Someone isn't going to say "wow look at this app that I can send death threats through, I think I'll go murder someone that I wasn't going to murder before".

That being said, the installer will install systemd by default, so you either need to remove it after the fact, or monkey with the installer to force it to use sysvinit instead.

It's not being "forced" upon users. It's still entirely possible to have a Debian system without systemd. It's not Debian forcing it on users, it's Gnome depending on it. If you don't need Gnome (which you especially wouldn't on a server), then you don't need systemd.

The prolem is that it's difficult to allow access to just the top 25 sites when everything goes through CDNs and pages have scripts being pulled in from 30 different sites (if my noscript menu is taller than my screen, I generally question the developers if the site). How do you determine what stuff to allow access to when those top 25 sites require so many other domains to function?

I'd rather pay to have a little bit of nuclear waste buried beneath a mountain where it will never be seen again than have stuff burned and pollute the air, have oil spills, and have totally-not-related-to-oil wars. Who pays for all of those things? The public.