Well I think she amount of caution is still appropriate no matter how much you manage to secure the local machine

Yes that sounds like pull backups, which is worth exploring

That’s an interesting idea

Yep offline backups are useful, although it does require remembering & making the effort to do it each time

Certainly sounds relevant, although overall it is quite a different approach than in currently using

For doing snapshots did that means the local system identifies the changes? Or it all gets copied each time?

Yes that seems like one way to go. Although I am using rsync so maybe keeping the files in place and changing owner could be an option

Ok there is a TV and a pi on network 1 and a server on network 2, the pi can connect to the server through SSH or VPN or whatever is needed. The TV would like to connect to the server, however it can’t run a VPN or anything like that so exposing the server would be a risk.

The SSH command on the pi is SSH -L 1234:localhost1234 remote_server

The ufw command was run on the pi, with the intention to allow the TV to access the forwarded port on the pi