To add some points, that I do:

• Proper logging: So I could realize something unusual is going on
• rootless podman container: harder to escalate privileges and gain root
• Apparmor: same, plus it could trigger suspicious log entries

Don’t feed the troll

If a firefox add-on is okay: Brief

Would it not just be the easiest way to put your scripts under /etc/network/if-up.d/? Then they get run once that connection is brought up.

Dito

Joe - just for quick edits on a text file

Because I started using it when it still was called mozilla and never got a reason to switch.

IceWM. Just the bare minimum I need. But nothing more.