It has a nice ribbon UI like MS Office! Unfortunately it is super hidden as you first need to enable experimental settings before you can switch it on.

Only other piece I would add to your great list: have at least one on-site and one off-site backup of your password manager, you’re 2FA codes, and your data.

Can you explain the VPN part a bit more? What do you mean with discretion here?