Try the OCCWeb app in nextcloud apps.

It’s a pretty popular desktop client, and the migration of K9 into Tbird for Android was a good thing.

most backup providers encrypt data on their servers so you dont have to manage that I dont think.

That’s something you should manage yourself, so the provider isn’t the one with the keys, by encrypting the backup locally before sending it. Most solutions you mention let you do that.

Is this going to be another one where they fuck up the recog, cancel your google account and report you to the cops because you text pics of your kid to his doctor?

Just glancing through that guide:

OPNsense instead of Pfsense, because pfsense is going to rugpull, it’s just a matter of time. I wouldn’t trust the twats that run it farther than I could throw them because they’re pretty silly people. Rossman suggests exactly this in the intro to the router section, he would change if he hadn’t been using it for a decade already. Unfortunately, a lot of this guide is focussed on how to do it via pfsense and if you’re brand new, you’re going to have to figure out how to do it in OPNsense yourself.

Wireguard/Tailscale instead of openvpn. Faster and way easier to set up. Don’t even try to set up a full LAN routed VPN, just use Tailscale for the services you want. And use it for everything and everyone instead of punching holes in the firewall.

He’s definitely right about mailcow; if you’re reading that guide for information, you are not a person that should be self-hosting email.