Linux

So while I agree with some or the majority of your commentary I would like to add a bit of context.

Well, the question is why are you excluding web banking? (...) If you’re allergic to webapps for some reason

I'm not allergic, I just happen to live in a country where banks unfortunately force you get their mobile app for certain operations / you can't do everything on their web app because of "security" . There's a big thing in Europe around secure transaction authorizations that require a secure 2FA methods (not SMS) and banks here decided to implement that in way that their mobile apps kinda work as a 2FA to the web version. Heck I can't even generate a virtual credit card here without installing an app. Compatibility layers / emulation, such as Waydroid, even GrapheneOS is flagged by most of the banking apps here as well and they don't allow you to proceed.

Why are you using contactless payment? Unsatisfied with the amount of data your bank collects

If I'm using the app from the banking alliance they won't gather more info than what they already do whenever I swipe a debit or credit card on a payment terminal. I kinda becomes about convenience at that point. Obviously the same can't be said for Apple Pay / Google Wallet and I avoid them.

Govt provides electronic versions of your identity card (...) Either way, this isn’t something you “need”, as carrying your documents around really isn’t a problem…

Actually that's something I need, let me tell you why: I'm required to digitally sign a LOT of documents everyday and here you've two ways to do that. The classic one is by having a smart card reader in your computer, open a desktop app, choose a file and place the identity or professional card into the reader and type a PIN code. The second way is to open the application and click "sign with your phone", this will prompt you to open the govt phone app and enter a PIN / biometric authentication there and the document will get signed as well. While the first option works fine it's just annoying to have to carry a card reader around to meetings and other places and it also takes way more time for the desktop app to respond and sign the document if you se the identity card.

…first you buy an IoT device that connects to “the cloud”, then you say you need proprietary software to access it. Of course you do, that’s the kind of device you bought - the vast majority of IoT devices are made with zero regard to the user’s privacy and security, to hackability or right to repair. (...) That said, it’s very easy to find hackable devices if you do the bare minimum research

You proceed to give examples of vacuum cleaners and other stuff that is indeed easy to find more open.

I'm all for open-source IoT, I like it as an hobby and I run HomeAssistant and most of my IoT is DIY ESP32-S2 devices with sensors and relays. I also have some cheap relays and plugs from Aliexpress that are BL2028N and I managed to flash with ESPHome / Libretiny however things become a LOT harder when it comes to CCTV.

Cameras in general aren't as easy as cheap plugs to deal with. There's the OpenIPC project but it seems only to support very specific chips that are sometimes older, hard to find or not price/feature competitive with TP-Link offers.

For what's worth TP-Link Tapo cameras (TC70, 71 etc.) aren't that bad when it comes to privacy, there isn't much "cloud". They do require you to use their mobile app to setup the camera but afterwards you can just run them on an isolated VLAN / firewall them from the internet completely and you'll still be able to use all of the camera's features. Those cameras provide a generic rtsp stream that even VLC can play and there's also a good HA integration that provides all features of the TP-Link Tapo application like pan / move / download recordings from the camera's SD card and whatnot 100% locally / offline.

but don’t pretend there’s some insurmountable barrier preventing anyone from using it

No, but it would make my life considerably worse or at least impractical in some cases.