You cannot have Rwanda again because information would come out far more quickly about what is actually going on, and the public opinion would grow to the point where action would need to be taken.
I had an old Arch laptop as my server for the longest time, and just set up a fresh Debian server with the *arr stack, qbittorrent, airsonic-advanced, calibre-web, and jellyfin - almost everything from LinuxServer.io. I used Cloudflare tunnels for the web-facing services and have the torrents running through AirVPN via gluetun. Everything is in docker containers run in separate users.
I feel like I learned a shit-ton doing this so if anyone has a computer sitting around and wants to try dipping their toes into self-hosting, hit me up. I have a bit of free time and am willing to walk you through it and answer questions at any pain points. I should maybe make a post in piracy offering the same.
Very true, the less user input you have the safer your code will be.