Why no real db? Those other 2 features make sense, but if the only option you can use sacrifices the 3rd option then it seems like a win. Postgres is awesome and easy to backup, just a single command can backup the whole thing to a file making it easy to restore.

I mean it makes sense for error reporting. Lots of apps automatically report errors so that they can be detected easily, which would require internet access.

1 is just not true sorry. There’s loads of stuff that only work as root and people use them.

About the trust issue. There’s no more or less trust than running on bare metal. Sure you could compile everything from source but you probably won’t, and you might trust your distro package manager, but that still has a similar problem.

I use a k8s Cron job to execute backups with Kopia. The manifest is here