[Samsung Galaxy S10 ROMs, Kernels, Recoveries, & Ot] doggydog2:
lot of confusion here and no answers for my questions in any thread so must get knowledge by trying. result so far: max benefit is rooted stock + plugins + twrp.

* TWRP can be used with encryption, but won't read encrypted files (/sdcard doesn't matter, but /data does). therefore won't flash most files, but some will be ok. also editing files and maintenance (dalvik) is still possiible.

* ROMs/MODs not compatible with encryption, as they push multidisabler. So it's normal to install multidisabler after twrp or after format data on such demand

* magisk has multidisabler functions, although it's not clear if it will 100% protect. i saw no impact of booting non-root and root whenever needed. i now treat non-root mode like useful safe mode.

* TWRP recovery needs to be updated after firmware update, due to kernel, so either wait few days for a release, or roll back to previous magisk patch. or stick to magisk patch all the time. anyway it has to be created each time. also, no problem to flash generated patches again and again.

* Xposed .4+ lags just like on any Pie device this year (last 'stable' release was single version 0.31x), SANDYHOOK version freezes some apps randomly, YAHFA version lags whole system, massive boot delay, but no freezes later. I stick to SANDYHOOK for now. btw the only plugin not working with old 0.31x this year was miui customiuizer for me.

* got used to bixby+power+volup well, actually almost never needed as it's not required after shutdown reportedly, and restarts should be done manually if the apps don't do correct restart. actually i had 1 bad boot out of 50 so far.

* catching download mode can be annoying, cable definitely helps or reportedly a discharge.

* very fast loading of OS, very slow boot (up until big logo screens), first logo - 1sec, warning - 3sec, second logo - 10sec, OS boot - fast like pixel experience

* i prefer rooted stock with twrp and encryption (consider plaintext phone as unusable) and got most of ROMs/MODs functions thanks to magisk and xposed plugins:

-- got nice boot screens without any exclamation marks, or custom text or knox text. i could also place "Hold VolUp to enter recovery" text there actually

-- removed regular restart from power screen, and renamed recovery to restart - so there's no confusion, never boot to non-root

-- call recording enabled, nicely integrated to call screen, call history and replay possible

-- sticky wifi and bluetooth pairings

-- multiple headphones use aptx and stick to it

-- no high volume warning and many more customization

also covered privacy, masking identity, devices ids, telco ids, locations, user data to most processes (not only apps). one thing not covered is debloat, but i like to do it by hand and then make a script. what a mess here, even xiaomi spyware ROMs are nice to users(!). facebook is proactively contacted at boot, before VPN starts, and after disabling all their services:) fight begins. won't stop until my router sniffer shows no bs connections from samsung, hiya, facebook, ondrive and other bs services.

- also have problem with persistence, afwall won't run magisk script, twrp won't remember settings etc. pre-VPN leaks are warranted.