Gocryptfs or CryFS. Many GUI available (Vaults, SiriKali, Plasma Vaults). Android compatibility with DroidFS.

DroidFS does not have Internet permission so any data exfiltration is prevented at the OS level.

F-Droid is like package maintainers for Linux distributions. You have to trust them if you want to use their pre-built binary. However, some app builds are reproducible. Check the doc for more info.

Of course, but v1.x only supported gocryptfs. Also, new encrypted file systems may be added in the future.

DroidFS can open existing volumes. Just click on the “+” button in the bottom right corner, then on the folder icon, and then select the volume directory.

To type with only one finger, there’s 8Vim.

:help i_CTRL-H

<BS> or CTRL-H  Delete the character before the cursor (see i_backspacing                                                       about joining lines).

From a security point of view, it’s better to create a dedicated network for each of your containers, as apps won’t be able to communicate with each others directly.

You can even not setup networking at all and use UNIX sockets instead. However, back-end apps will need to support that.

What about DroidFS?