Yeah, going from AWS to Hetzner will require doubling your SRE/platform/infra/whatever-you-call-them staff, clearly.

Thanks! Will dig into it

For someone whose main focus isn’t networking, do you have a guide or similar I can read to catch up? I’m running my setup on a properly killswitched VPN, but having firewall rules that are only valid for the VPN seems like an interesting extra step.

One can only hope

There’s a pretty massive difference between “I managed to build a simile of a single-shot rifle from scrap and kill a person with it” and “This legal assault rifle allowed me to perform mass murder in a public space”.

You talk about arms for self defense, but the rest of us don’t go around worrying about not having a 9mm or rifle in our car or next to the front door. You guys have built a problem with arms over there, and until something radical is done you’ll keep having an arms problem.