

to expand a little. I’m actually on the market for a 10pro because de-googling has not been enough for me.
Android’s native permission system is broken and google refuses to fix it. Many many apps (Facebook, aliexpress, instagram) reach outside of it’s own environment to read other apps
Currently I’m using “Islands” as a workaround. (Highly recommend it) https://f-droid.org/en/packages/com.oasisfeng.island.fdroid/
Graphene fixes this permanently by allowing you to set specific permissions for each app to access only it’s own files or otherwise allow it to access others on a one by one basis.

is crowdsec no longer the gold standard? I’ve been sself hosting since … forever and I’ve never heard of anubis, but I’ve seen it in the wild.
Suggesting a self hosted alternative in an enterprise environment is a no-no (unless you’re in a startup)
Any self respecting enterprise level business will require warranty and support which self hosted solutions do not offer. Good luck trying to get an “SLA” out of Anubis support, if it even exists.
Sounds to me like you need a WAF (if you want to self host it for some reason) there are other enterprise level services that specialize in this. Zscaler comes to mind, but there are dozens.
Free plug for my company because they help pay the bills.
https://www.imperva.com/products/web-application-firewall-waf/