All his files are secure and properly synced… unlike Nextcloud.

Spamassassin is useless these days, you better be using rspamd.

https://workaround.org/ispmail-bookworm/catching-spam-with-rspamd/

You can force all outgoing traffic to use the VPN interface via iptables/routes (meaning if it doesn’t exist or doesn’t work nothing will be able to access the internet) OR use systemd globally hide the non-VPN network interface from all services except for the VPN client.

Although I understand the OP’s perspective open-source is a community effort and people should have a more proactive attitude and contribute when they feel things aren’t okay. Most open-source developers aren’t focused / don’t have time for how things look (or at least not on the beginning). If you’re a regular user and you can spend an hour taking a bunch of screenshots and improving a readme you’ll be making more for the future the project that you might think.

Dear open source app user: feel free to improve the README file of the projects you come across by adding a few screenshots you believe are relevant.