bruh what are you talking about, there are indeed national root certs but that's purely for Sberbank and similar government sites, I wouldn't put it past them to go further but we're a loooooong way off
chayleaf
LTSC isn't hacked, it's an official LTS version
I use noscript and whitelist javascript URLs per-origin, this coupled with uBlock means even the trackers uBO doesn't block usually don't work
if you want to configure Fennec to use Searx, set the search engine URL to https://searx.example.org/search?q=%s
Other than that, I only have one tip for non-Google search engines - always set the correct region.
Material Files on F-Droid supports SFTP
build some of your own projects then. For example, my router has split routing between sites that require no VPN and normal sites. Find a project to do that isn't covered by tutorials, or read manuals instead of tutorials
KeepassDX
tbf public transport can be very bad for privacy, depending on the politics of your country... granted, with facial and other recognition nowhere is safe
You can use Tesseract for OCR and any engine for translation. That said, in my experience there are much better OCRs than tesseract, but you gotta surf Github/Huggingface for that.