1. I’d be fine with any. Trying Fedora, or maybe Debian. But I’d rather set up networking at the qemu level so the vm only has access to what I want it to.
2. I don’t know how it would work, but I can create a new device id and make a new wireguard conf file. I don’t know why this wouldn’t work with any other conf/interface on my host.
3. I want this to be physical router agnostic, as the host is a laptop. Only the vpn and host should be exposed to the VM.

For the tablet? I’m considering a Surface keyboard or cheaper alternative, but I would usually be using it for handwritten notes and other tasks for which I would not use the keyboard. It would really be most useful during initial setup. I would still need to easily open it when the keyboard is removed.

Flare isn’t feature complete but you can run it in the background for all notifications.

I think a server is for streaming the audio to different devices. They don’t want to stream from phone to the player (or the other way around). They just want to be able to browse library and control playback from their phone.

Would that be better? If some Israeli Jew living in the US had been stabbed?