Maybe start here? https://fightchatcontrol.eu/

Let me do the work for you; since you'd rather just spread FUD then look for facts.

1. https://www.linkedin.com/company/grapheneos/people/

• 0 California "employees" listed

2. https://www.dir.ca.gov/dlse/SB3_FAQ.htm (I just want to point out that there is a distinction; and I am not a lawyer) "Any individual performing any kind of compensable work for the employer who is not a bona fide independent contractor would be considered and counted as an employee, including salaried executives, part-time workers, minors, and new hires."

It also sounds like they are trying to fill a part-time role. "Must be able to commit to spending 80 hours or more a month" = ~20 hours a week, but given the ebb and flow of release/bug/patch work needed...

FUD

1. GrapheneOS is a non-profit out of Canada.
2. It's an "independent contractor" role. California has specific laws governing the classification of workers as employees versus independent contractors.

I don't know if there's really a better way to manage this need. They need a pretty niche specialized developer, so you have to cast a pretty wide net (globally, mind you) for remote work.

1. It's a pretty small global team.
2. How would they financially/legally manage the burden of tax/benefit/workers rights across all boarders; especially as a non-profit.

Yes, people should know what they are getting into, with independent contractor work. I just think there is (probably) some nuance to this particular case; where hiring people on as an employee doesn't make a lot of sense.

I don't know that many of my adult friends even hit half the items talked about in this article.
What's your own score?

Who benefits?

Who benefits from sowing a narrative around "drama", "accusation", and/or "paranoia". Seriously.

I think given the following circumspect; GrapheneOS's reaction, to move project pieces out of potential hostile environments/jurisdiction, is perfectly reasonable.

1. France's Support for EU “Chat Control”, scanning proposals. France has been one of the governments most supportive of EU‑level proposals that would require scanning of communications and devices for illegal content.

2. The general French framing and approach to cybercrime. As in other EU countries, French authorities are pushing for: Expanded powers to compel cooperation from service providers, and developers. Strong rhetoric against tools that are seen as systematically obstructing investigations.

The revelations that came out from the Edward Snowden ordeal.

I think you've missed the point OP is trying to communicate. It's not that these things aren't relevant, highly important, and good caution/warning. It's the gate that people are creating with these no depth explainers. "you need to understand" "if you don't know" -- then fail to provide direction to people who want to know, to learn these things, to figure out where to start; that's the gate.

The price of being on the bleeding edge.
But also, trust the process, it's a feature not a bug.

Also, I'll add, that I think that beginners learning this immutable, devcontainer, distrobox workflow offers you more space to practice and learn by doing. You'll will learn a lot by recovering from some misstep (rollback), and/or by blowing it up, to rebuild it again. (and I encourage you to do it often for the practice and confidence)

Check out the 'dx' variants within universal blue It would be a good time to become familiar with rebasing.

I run bluefin-dx environment. (gnome).

There is a different learning curve to immutable/atomic systems and workflows. I don't think it's harder per say, it's just you'll have to be cognizant of the differences when searching for relative and relevant information when you come up against anything (like any opinionated *nix distro). Learn Homebrew, and Flatpack (and thier quarks running with atomic systems).