Stop recommending questionable open-source like Matrix.
Synapse and Element are fully open source, there is nothing questionable about it. Having a company backing your project as main developer does not mean it suddenly becomes closed source or said company owns the project now.
None of the issues you mentioned are a big deal or make Matrix inherently worse than XMPP. The biggest flaw you can pin on Matrix is its performance but they’re working on it.
Flathub is actually fairly strict with its submissions, probably too much work for most fake submissions to follow the PR guidelines.
https://docs.flathub.org/docs/for-app-authors/requirements
https://github.com/flathub/flathub/pulls?page=2&q=is%3Apr+is%3Aclosed
I’m curious if cars would be bricked if they couldn’t call home, or if you could selectively allow certain messages through.
I can’t speak for every car but at least Teslas do not mind being offline. You cannot control which messages they send because they connect via a VPN to the mothership. So it’s an all or nothing kinda deal.
You can also pretty easily remove the SIM card on older models with just a few screws. Newer ones use eSIMs, never looked into how to get rid of that one but I assume it is more complicated.
Your comment makes me wonder if one could get around AT by installing faraday cages around where the chips are.
The antennas are usually external, mounted somewhere else in the car and can be unplugged. Never checked if it can still get a signal without the antenna though.
edit: Also, the PCB itself is mounted inside a faraday cage because the entire thing sits inside of RF shielding.
Is there anything else that might indicate the domain name in the handshake connection?
The SNI (Server Name Indication) happens before any HTTP communication and is done in plain text. It is needed because a single web server might host multiple websites, since each of them has their own certificate it needs to know which one to serve you.
With the new proposal that SNI is now encrypted. It makes the difference between anyone listening in being able to tell “you visited lemmy.world” and “you visited something behind Cloudflare”.
I used to have a second partition with Windows for such cases, but over time I just stopped bothering with those games.
Now I just refund if it doesn’t work and move on in my to-play list.
I still have a Windows VM for some applications and for doing firmware updates but I never bothered to set it up for playing games.