Firefox of course :) It's the last one that has no compromises. As an example, Brave offers similar adblock and privacy features, but at the cost of having to put up with Web3 stuff. wbu?

The web browser.

It's true that you need extensions on FF to have some of Brave's more advanced features. However, I consider this to be a good thing because you can skip their Web3/AI/Ads garbage and only get the features that matter like Forgetful Browsing (through Cookie AutoDelete) for a possibly lowered attack surface. Any Chromium fork, no matter how against big tech it claims to be, is still at the mercy of Google at the end of the day. Nobody is going to spend their time or resources patching Manifest V2 back into the browser after it's completely gone from the upstream.

It's the opposite for me. X11 is unusable on my laptop because it doesn't support fractional scaling well, whereas on my desktop it doesn't allow for a multi monitor setup with different refresh rates. Both dealbreakers are not present with Wayland. Though your point still stands; NVIDIA GPUs continue to suck more with Wayland than X11 for example.

I think I like the direction they've been going in lately.

I try to use a minimum for performance reasons. My big three are uBlock Origin, Dark Reader and a password manager.

I've never heard of Kvaesitso in particular, but I like simple, search focused launchers as they force you to specify what you want to do on your phone instead of letting you mindlessly open e.g. a distracting social media app.

Fewer politics.

Funny how the free plan is not receiving any of the recently announced trash, making it more attractive than the paid options.

Native Wayland apps run great. Can't say the same about those using XWayland, as most of them suffer from graphical glitches and flickering (especially Steam and Minecraft). Secure Boot works with some manual configuration.

you can run an ArchiveTeam Warrior on your server and choose the URLs project. if i understand correctly, the Warrior will continuously visit randomly discovered websites to download their contents and upload them to a server that later feeds the data into the Internet Archive. best of both worlds - your ISP has a harder time distinguishing your real traffic from the ArchiveTeam-generated one, and your server is actively contributing to IA.

GrapheneOS has sandboxed Play Services which basically means they run just like a normal app on your device and you get to choose the permissions they get. My bank's app works with it too (no GooglePay tho). It does require you to get a Google Pixel phone though, which might defeat the whole purpose for some.