I think it could use more guard rails. Like if you are flashing a 4gb image to a 256 gb partition. a confirmation dialog?

Love the raspis, just make sure the passwords are not stored on the sd card because those fail all the time hah.

I self host via vault warden. And I have it locked behind tailscale vpn. Aside from your server itself getting hacked, which is a risk, this is more secure than having passwords on the public internet.

Thats nothing, on 2 separate occasions i mistyped the parameters for dd and erased my entire hard drive lol.