Haven’t had a samsung phone since the note 3, but I remember having issues with unlocking the bootloader, I think you had to use some 3rd party tool because samsung provided no guide in their manual. With nexus and pixel phones it’s really easy so them I can definately recommend.

According to wireguard itself the kernel-module based backend is more efficient/faster than the userspace implementation, and to use that it still requires root.

Adaway of course, and wireguard via the proper kernel module.

I have actually never flown on a narrow body plane that had charging ports, so I wouldnt say “most flights”

Mine has always been super snappy, so something’s definately off I’d say.

Mostly caching I guess, so less cold starting of apps

Yes it is, but ofc. the host screen goes blank when you start the VM. I run enerything on one virtualization host as VMs so this is not an issue. Basically I can run one machine that requires the gpu at a time, and of course all the headless ones like servers and the firewall keep running normally in the background.

I’ve been running a setup like this for years without issues. Only the initial setup was a bit cumbersome, specifically getting it to work with just one GPU. Ran two for sometime before I got it working without issues though