Is in memes. Has onion logo. Unsure if real.

Felt a bit like a faff to me, so I never bothered. Does depend upon your threat model though

Passwordless login only. No root login. Fail2ban. Add ufw to stop accidental open port shenanigans, and you are locked down enough

You forget the rise of the robots. No need for stupid meatbags to assemble stuff when a metalskin can hallucinate do it perfectly every time

Fair enough, it lowers the risk. Are you doing key stretching? Ie. X rounds of pbkdf or whatever it’s called?

I feel like saving the password in the export is a bad idea if security is your thing

Either be silent and accept your fate when they run out of others, or keep fighting