ChaosMonkey

You're right to be reluctant to apply everything by hand. K3s has a built-in feature that watches a directory and applies the manifests automatically: https://docs.k3s.io/installation/packaged-components

This can be used to install Helm charts in a declarative way as well: https://docs.k3s.io/helm

If you want to keep your solution agnostic to the kubernetes environment, I would recommend that you try ArgoCD (or FluxCD, but I never tried it so YMMV).

You could try to dump the EEPROM and get a hold of the user password or override it by reprogramming it.

Show us the way then.

I do not promote fear, and commented about my opinion on blind trust.

If you want any help reverse engineering apps or analyzing their behavior I would be happy to share my knowledge.

Any modded app provided for free by some rabdom uploader is suspicious. You cannot blindly trust any platform. If you care about your privacy and your device's security you should analyze the app's content in depth or buy the app (or crack it yourself, but it usually means you need to buy the app first).

I guess the network will be a bottleneck on Garage too. If you want high performance you might need a hybrid solution, like clustering of stateful apps on local storage as well as periodic full backups on a distributed storage.

Longhorn is pretty easy to use. Garage works well too. Ceph is harder to use but provides both block and object storage (s3).

Did you read the first paragraph of the article?

Probably the training data.

Hmm, but in this case you would be recording either the ads or the buffering.