Title. I plan to migrate a computer that my little brother often uses from windows to Bazzite. He can navigate windows fine but he downloads a lot of junk. I'm hoping a more simplified OS that simultaneously doesn't let you run whatever .exe file you grab off the internet will curb his habit and mitigate some of the possible damage he can cause.
The computer is down my grandmother's and I live a bit away so I can't run down and monitor everything he downloads so, I've already taught him to use "the green lock" (mullvad) whenever he uses the computer. It doesn't stop him but it keeps my grandma from being on the hook with xfinity because he downloaded an nes rom or something.
When I do change it to Bazzite or another Linux distribution I want to make sure it's just as simple and intuitive for him to turn the VPN on after I set this up so he or my grandmother don't need to call me when he wants to use it. If Bazzite doesn't have it what're some other options? I'm aware fanagling with wireguard/openvpn files along with a script on startup can do this as well but I'm looking to do this as simply and quickly as possible as I'm going to have to do the entire process (salvaging whatever I know isn't malicious+deleting windows+installing everything back including Mullvad) while he's asleep.