OpenSnitch update: I disabled it on my Librem 5 because it kept a CPU pretty busy at all times, even when idle. I'll keep checking new releases as they come out for improvements. Until then I'll enable it opportunistically whenever I need to increase defenses.
@kyle