This is utter nonsense. First, let me point out that this is an ad for Surfshark, a VPN company. They’re trying to sell you their service by scaring you.
Second, their methodology is absolutely useless, it’s an easy and very common way to come up with a clickbait article like this. They’re just looking at app store permissions, and assuming the app with the most permissions is bad and the one with the least permissions is good. Which is utter nonsense, it might be that the apps with more permissions NEED those permissions because they have more FEATURES.
I could make a “language learning” app that ONLY asks for the audio recording permission, and then sell audio recordings of my users to the highest bidder. But Surfshark would praise my literal spyware as “privacy-focused” because it only needs one privacy permission!
The way to ACTUALLY do this properly would be to fully audit each app, find out WHY it’s asking for additional permissions, go over the full privacy policy, and do some packet captures to figure out when the app is phoning home to send data, and what servers it’s connecting to. Contact the app owners, ask them why exactly their app needs each permission. Consult some experts.
But that’s too hard for Surfshark, they just want to write a scary article so that they can sell you a VPN that doesn’t really make you safer on the internet.
EDIT: You know why I dropped Surfshark? They started bundling a “virus scanner” in with their “privacy-focused” VPN client. So my “privacy” tool wanted to scan all my files all of a sudden? GTFO.
I have Plex, Radarr, Prowlarr, and Qbittorrent all installed on the same dedicated server. I’m using a SOCKS5 proxy instead of a VPN, it works great because I set up Qbittorrent to use the proxy and I just leave it running 24/7. I also have Tailscale installed for remote access, setup for that is dead simple.
Here’s my workflow if I’m away from home:
That’s it. If I’m already at home, step 1 is not necessary.
Prowlarr and Radarr find the movie on my registered indexers, at the desired quality, and send the torrent to Qbittorrent. Then when the download is finished they automatically rename the files and move them to my Plex library (and they could do the same with Jellyfin). Roughly 10 minutes after I finish step 3 (more or less depending on seeds), the movie magically appears in my Plex library. I don’t have to turn a VPN on or off.