@irvinewade Yep I was being intentionally imprecise since I knew my requirements are malleable enough to do what you said at the end to make it work one way or another. If I had hard security requirements I wouldn’t have decrypted the phone. 
I’m not going to this level (funny post 
), just “reasonable” security to thwart the casual.
So anyway, I didn’t expect that #4 idea to get so much attention. I think I sort of have an answer for #3 (I just wish it worked better). #1 I have a workaround for thanks @ASwyD2 and #2… is probably still an issue. I guess I can work around it by going into horizontal mode.
So I kind of have answers to the original questions, just not answers I like. Some automation or enhancements from Purism (or any source) to address some of this would be nice.