This is the way, there were instances where M$ updates removed the Linux Boot options. So its better to keep them separated. Also a Malware on one system could infect the others.

You can set the swappiness so that RAM gets filled before SWAP. You need it if your RAM isn’t large enough for the stuff you want to do. You also need it for Hibernation to be the same or larger size like your RAM. Without it you can only suspend. You MUST use encrypted SWAP if you want to be really secure since otherwise your encryption key might be written onto your Nvme.

NO, an attacker getting control over a vps used as a tunnel could not read Data captured in the past. Also they could not do a MITM with decrypted SSL without breaking HSTS

But having a reverse proxy would enable someone getting access to it to read traffic, while having a VPN Tunnel won’t.

Last time I looked it had way less features then yunohost and its closed source.

Des, it has, what most others lack: Single Sign In and many Apps.