I really want to like HomeAssistant but their security approach is baffling. They insist haos doesn't need console security because it's inherently local, and then don't provide any support for tls on their web app at all, with a healthy vibe of "you only need TLS for the internet" alongside it. And then their only option is essentially "pay a sub to support the project and get a cloud proxy with SSL so you can access it remotely!" I have a lot of opinions about this, turns out.