I imagine I am eventually going to end up with a rpi (built-in dualband wi-fi serving as AP) and a usb battery pack and a 4/5G modem strapped to my lower leg whenever I leave the house, backup pistol style, as smartphones become less and less able to be configured to preserve privacy.

Turns out I need to have root on my dns server and iptables/wireguard on my NAT router. It’s slowly becoming non-negotiable.