You could port forward.

However, I’d buy a digital droplet for 10 USD a month, point the A record of the domain to that and then use Caddy to implement SSL.

Caddy can run a http server or reverse proxy something on localhost.

Not a tablet, but the framework 12 looks interesting and I think it has a pen.

Openrc is used by alpine and gentoo. They both work great.

Runit used by void is also fine.

If you can figure out gentoo it’s not a bad OS but compiling can be slow. You’ll learn a lot though. Checkout oddlama/gentoo-installer

You can’t, this guy doesn’t know what he’s taking about.

Port forward behind CGNAT won’t get you out. Best bet here would be ipv6.

Tor would work. However, only over Tor obviously.