I just want my phone to stay out of my way, and not jumping up and down :)
Is this something they enforce, or can I bypass this with a VPN because they don't actually care but have to say that for legal/economic reasons?
In practice you just need to buy the license from a EU IP (so via VPN, europen VPS, etc.) and then you are good to go from anywhere in the world. This can be seen on these global stats for the Sailfish OS community software repository:
https://openrepos.net/statistics/global
Lots of traffic from outside the EU. Also I took my Sailfish OS device for a trip across Japan twice, and everything worked fine for me as well. :)
So in general I recommend getting a EU based VPN and then buying the Sailfish X license for the device of your choice (I would personally recommend xperia 10 II). If you succeed, then I would get the device, just in case. :)
Sailfish is being made by a small company with not that many developers, which means there are rough edges compared to Apple and Google. They can spend many millions on their software. I am very happy with Sailfish updates though and also very happy with using it.
The only Android apps I use are Firefox in its last v68 incarnation, and also Whatsapp. I'm lucky not to be tied in too much with all kinds of services :) For many services there are native apps.
And yes, it is not fully open source, which is a pity. The current investor sees no business opportunity in that, but to be real, without that investor, Jolla and Sailfish would not exist anymore. They are mostly a B2B company now, B2C has commercially failed around 2015. I do hear sometimes that more people are using Sailfish, but I haven't seen real statistics. There is also the Nemo project, which started with reimplementing the closed bits in Sailfish, and later deviated somewhat. If Sailfish gets more succesful, that is always still an option to force their hand, but I do feel the time is not right. I do have to say that the Linux community can be very critical towards its own community, sometimes getting to be toxic.
I would be open for a Pinephone, but it is mostly regarded as a developer phone right now. I will wait for Pinephone2 and hope things improve to make it more a daily driver. The Librem 5 is priced out of my league, though I do admire what they are doing.