Replace proxmox with incus.

Check out Kasm too, you can easily install blender into it.

I’d be surprised if it wasn’t just based off the UEFI sdk examples containing 30+ CVEs over the last couple of years. If anything, it won’t get patched for logofail and all the others UEFI exploits we’ll definitely see in the coming years.

This for sure, and bonus points for “USB Ethernet gadget” mode if you have a 4 or zero ;)