Does anyone have any clue?

My best guess would be some relatively passive notification stealing focus.

As reddeadhead mentioned, there’s specific “don’t steal focus” settings. I’ve had good luck with them.

Immutable distros can usually be set to mutable with the correct privileged command.

It’s essentially security by obscurity. But I disagree with “no benefit”. An infection miss through dumb luck is still a miss, after all.

I’m partial to RetroPi or Batocera, so I end up with a retro game console and media player in one. This build works with anything compatible with Kodi. Excellent for home media, but paid and free streaming services are hit and miss.

There’s also builds of Android Open Source Protect for Raspberry Pi, which have much better support for streaming apps, since anything that works on an Android Phone works, as long as the streaming service developer hasn’t done anything stupid.

Edit: A warning though - Android on Raspberry Pi is still very new. Think Alpha/Beta test. I think that Android on ARM chips, in general, is new. It’ll get good, but your mileage may vary, for now.

There’s various builds for Raspberry Pi that make decent media centers.