Fully agreed. There's some stuff in the list that could leak server info or metadata about available content to the public, but the rest seems to require some knowledge before being able to exploit it, such as user IDs.
That doesn't mean these aren't issues, but they're not "take your jellyfin down now" type issues either.
Current LLMs are just that, large language models. They're incredible at predicting the next word, but literally cannot perform tasks outside of that, like fact checking, playing chess, etc. The theoretical AI that "could take over the world" like Skynet is called "Artificial Generalized Intelligence". We're nowhere close yet, do not believe OpenAI when they claim otherwise. This means the highest risk currently is a human person deciding to put an LLM "in charge" of an important task, that could cost lives if a mistake is made.
Probably, yes. Dual-booting may also be an option for the one or two games that don't work.
Not every game works, but as another user pointed out, ProtonDB is a good resource. If you buy a new game on Steam, and it doesn't work, you can refund it within the first 2 weeks (and below 2 hours playtime) for any reason. That includes "Ths game does not work on my operating system".
Try WiVRN, it's not built on SteamVR, and doesn't have the same issues SteamVR does. You can get it through a flatpak or by using Envision, as described on the LVRA wiki.
I don't play VRChat myself, but I have to disagree. I'm in several Linux VR groups, and the general sentiment is that it's not as easy to set up, but works well for the more popular games, including VRChat. This is similar to my experience. There's good resources (like LVRA) to help people set things up, or when they're running into issues. I'm also not saying VR on Linux is flawless, far from it, but to describe it as just "scuffed" without context doesn't explain the whole state of it.
If a tool (or distro) works well for you, it's a good option. Everyone has different opinions on the "best" distro, but since it's very subjective, there is no single "best" distro. There's only 2 distros I recommend against, that's Ubuntu (and close spin-offs) and Manjaro, because they have major objective downsides compared to equivalents like Mint or Endeavour. The distros I generally recommend to new users are Mint and Fedora, but feel free to look around, you're not forced to pick a specific one.
You noted you were likely going to choose Linux Mint, great! It's a "stable" distro, as in, it doesn't change much with small updates. Instead, new release versions (23, 24, 25, etc) come with new changes. Linux Mint comes with an App Store that can install from Flathub, which should be the first place to check for installing new applications.
As for VR, it depends heavily on which exact headset you have, and is not always a great experience on Linux right now (speaking from experience with an Index). The LVRA wiki is a great starting place: https://lvra.gitlab.io/. If you're on a Quest, WiVRN and ALVR exist, though they both have their own downsides. If you're on a PCVR headset from Oculus, your options are more limited. You might also want to consider a different distro, as VR development is moving very fast. Many VR users choose to go with a "harder" rolling release distribution, like EndeavourOS, to receive feature updates quicker.
Also of note, if you have the storage space, you can choose to "dual boot" (even with just one drive). This will give you a menu to choose between Windows and Linux when starting your computer, and will give you time to move stuff over. I generally recommend this, as it provides an option to immediately do a task you know how to do on Windows, when it's absolutely required to do the task asap.
The Steam Deck is a PC. The most console-like PC experience you can get, but still a PC.
Now for your list of applications:
Not only is comparing these not the point (CalyxOS has a different purpose than GrapheneOS), the chart is heavily biased towards Graphene. Take for example the whole section on privacy. They list Graphene specific features, note that Graphene has them, and make other roms look bad for "not having them", or even provide incorrect information. "Storage Scopes" and "Contact Scopes" for example, two Graphene features, intended to make closed source apps "happy" with giving them fake permissions. Although there's definitely a use for this feature, being much more FOSS focused, Calyx provides the option to isolate non-foss apps into a work profile. This is effectively doing something very similar, although more limited to the user. Or the "Tracking through Android Advertising ID?" column, which lists only Graphene as "Not part of the system", and everything else as "Randomized ID". Graphene runs the official Google play services "in a sandbox", without modifying or patching anything significant. This also means Google's implementation of Advertising ID is being used. This is not randomized, and worse for privacy than anything using MicroG. Calyx MicroG and Graphene Google Play Services are both opt in, yet the chart favors Graphene by claiming it doesn't have the anti-feature.
Article doesn't even cite their sources correctly, typo-ing "Bringus Studios" as "Dingus Studios"