I mean it’s been talked about over and over again leading to US accusing TikTok of spying on users and EU* banning Huawei and ZTE from 5G infrastructure.
But end users just doesn’t care. They click accept all on every popup without even reading if it’s cookies or to allow the site to send scam antivirus notifications. They buy the cheap chinese phone because it’s cheap just as they buy shit from Temu and Shein even when their plastic is poisonous and their workers are stuck with 75 hour weeks and not being allowed to leave the premises.

*Not all EU countries has chosen to ban them.
https://cybernews.com/security/bytedance-used-tiktok-data-spy-on-americans-supreme-court/
https://www.euronews.com/next/2024/08/12/eleven-eu-countries-took-5g-security-measures-to-ban-huawei-zte

You could use a computer with a headset as a linked device, that’s the closest I can think of.

Only thing I dislike about the T14s is that you have to dissassemble everything to replace the keyboard. On the T14 it’s so much easier.

A refurbished Lenovo T14 or T16 should do it.

While I’m morally in the opnsense camp I know pfsense has more third party packages available.
Running docker in an lxc sounds interesting, I’m a bit old school and enjoy the isolation that a true vm gives you.

Router: opnsense/pfsense
Switch: I guess look at something like Open vSwitch After some more reading I would go for a proprietary managed switch here. WiFi/Mesh network: OpenWrt with 802.11r setup - https://openwrt.org/docs/guide-user/network/wifi/roaming
Server: Proxmox or Debian Bookworm with KVM/Qemu
Docker/Kubernetes: Portainer CE version as a VM in Proxmox - https://github.com/portainer/portainer
Collab software: https://github.com/nextcloud/server
Server Backup: Proxmox backup server or Borg backup/Restic
Client backup: Borg backup/Restic