I agree, this is nothing unlike a bad human relationship. The problem with ChatGPT is the same as with the larger Internet itself: it doesn't belong unrestricted into a mentally underdeveloped person's pocket. Forums also egg or bully others into suicide. In the real life, we also got a lot of bad actors, who are actively making other people's lives worse, by amplifying their destructive qualities, for one. Or spreading misinformation, reinforcing bad habits and ideas, and the list is basically endless.
In Germany, it is the law. § 44b UrhG says (translated):
(1) Text and data mining is the automated analysis of one or more digital or digitized works to obtain information, in particular about patterns, trends, and correlations.
(2) Reproductions of lawfully accessible works for text and data mining are permitted. These reproductions must be deleted when they are no longer needed for text and data mining.
(3) Uses pursuant to paragraph 2, sentence 1, are only permitted if the rights holder has not reserved these rights. A reservation of rights for works accessible online is only effective if it is in machine-readable form.
One person's norm can oppose another's norm. Who defines them? If my "norm" is to stop at a stop sign, and yours is to roll through it, are you the abusive jerk?
"I will do anything that will not literally get me into jail" is a pretty low bar. Most decent people try to do better than that - and that's the only reason society still exists, because there's not enough cops to put all bad people into jail and never will be.
TOS wouldn't be enough but laws wouldn't be enough either. We have thousands of pages of laws, and people violate them all the times, and very often with zero consequences.
Any website you visit could have been compromised and serving malicious content. Upon first visit to a website, I block all connections to domains not in the address bar, then go back in and add rules to allow connections as needed. It doesn't address malicious activity by the site directly, like a server compromise, but does limit non-addressed connections, including ones to local addresses.
For example, a compromise of .google.com which leveraged assets/code from .googleusercontent.com wouldn't initially be able to run, unless I added a rule to allow the connection. Likewise, a compromise of *.discord.com that made a connection to localhost:8983, then tried to send that data to someserver.ru would get blocked and logged. Where this can't protect me is if the server sends the mined data back to itself, then forwards that data on using its own connection.
Ad networks sell to anyone. Malicious content can be injected almost anywhere. Its happened before; it'll happen again. This web browsing hygiene has protected me enough times for me to make it my standard practice.
So, I should expect to see a new product launch of DoughnutKVM, to "round out your infrastructure woes", complete with vibe coded app interface and AI generated product images, here in the next week? ;P
Its simple usability polish. Tomato had it, OpenWRT doesn't. But where it shines is in the reliability. I've been using it for over 10 years, and prior to that DD-WRT on a 54L.
That's the biggest challenge with many of these open source tools. They're built to solve a single or handful of problems, but don't always fit for a larger audience. I'm not complaining either, and I'd be happy to provide the polish, but right now, my time is spent with my clients ($$).
If you invest the time in getting it configured the way you want, you'll be happy too, for 10 years. ;)
Food for thought of why I'm exploring other options currently:
1. Need a WAN failover that can check with a custom heartbeat
2. Need an easy-to-configure VPN that doesn't use an open port, but will register against my own cloud server
3. Need an easy way to monitor traffic of particular devices - DNS queries and active connections
4. Need a big button to turn off the internet for all, and individual buttons to turn it of for specific devices
5. Need an easy way to manage VLANs and traffic routing rules (for local-only designated devices)