How is giving something, that is nondeterministic, access to your web browser a good idea? How do you guarantee that it doesn’t enter sensitive information without the user’s explicit consent? How do you guarantee privacy and security?

I’m skeptical, but I am genuinely asking and willing to listen.

I’ll get downvoted to hell for it, but you failed to include a valid third choice: not voting for either if they don’t represent your values.

I recently did a rpi media player project and tried volumio, picoreplayer, moode, and others. I ultimately settled on installing android from konstakang.com. It was so much easier to set up imo for my use case, which was a focus on local music playback and keeping the files sync’d via my LAN. It even supported my hat DAC and my remote control.