Look into SoloKeys and NitroKeys and see if there’s products from those vendors that fit your needs.
They should face huge fines for this kind of waste. $25M USD for each computer arbitrarily obsolete.
Just checked my own sshd configs and I don’t use CBC in them. I’ve based the kex/cipher/Mac configs off of cipherlist.eu and the mozilla docs current standards. Guess it pays to never use default configs for sshd if it’s ever exposed to the Internet.
Edit: I read it wrong. It’s chacha20 OR CBC. I rely heavily on the former with none of the latter.
“Asking nuanced questions of a glorified autocomplete results in poor answers. News at 11!”
Install Ubuntu and be done. I’m able to print to my brother network printer with no special drivers. I installed a gnome tweaks package to do some minor tweaks in gnome, and I did rip out the Firefox snap thing to install Firefox from a package so I could use my kpxc plugin, but that’s the only major change I made. Hell, Dell (laptop) even provides firmware updates via the package manager so your bios gets updated properly. Best Linux desktop experience I’ve ever had over the past 5 years and I’ve been daily driving Ubuntu since 2004.