Security posture that can reasonably withstand nation states

I don’t think we should advise people on specific situation. There are people who already do that for a living (you?) but generally speaking a few remarks.

All of this sounds great and all, but at the end of the day, still vulnerable to the “5$ wrench attack”

xkcd

Security

If you are a serious (publicly know target) of a nation state target, you need to take step to ensure physical security. One way could be to share one location (eventually delayed by a few hours) to trusted person. In case of kidnapping.

You would also need a silent alarm in case of physical coercion.

Every 30 minutes, a hard-interrupt terminates all connections within the VPN, with the goal of preventing lateral movement and persistence through the endpoint

This seems a pain in the ass. That’s my main critique, the system seems so hardened that at some point this person will just bypass it.