Mounting home and temp partitions with noexec should prevent that.

Why don’t you have to use a VPN on a private tracker?

Yeah. I think tcpdump/wireshark is the way to go.

I’ve used platformio and it works well. It can generate ‘compile_commands.json’ and clangd lsp works out of the box.

The best solution is to create an issue and attach the pictures there. You can then link in README and not bloat the repository.