How Chrome OS, Termux, YubiKey and Duo Mobile make for great usable security
One thing I'm finding a limitation about this setup is that it's hard to do some package installs, due to the toolchain limitations.gcc is out. you have to install clang, but that doesn't work for everything.