I doubt if someone wants to introduce a backdoor, they would do that with a russian mailing address. People removed were open and transparent about their nationalities which means there is even less chance them being bad actors than some random guy pretending to be American.
I think it would make sense to actually specify what you mean by nightmare and on what disto to make an argument. Many people have 30xx GPU and they all use the same driver too and if it works for them (same card, same driver) that means it might not be a NVIDIA issue but a distro/setup issue. Don’t expect a proper counter argument if you don’t make a proper argument. I use a laptop similar to OP’s question and the GPU is sleeping all the time because it uses Intel’s integrated GPU for generic tasks, dGPU only wakes up for Vulkan or CUDA tasks like gaming and AI. I don’t remember when was the last time NVIDIA broke the boot process but it was at least 5 years ago back when I was still using Arch and init.d and it was an Arch problem for pushing a kernel which was incompatible with NVIDIA driver and not specifying version compatibility. The GTX 2060 is supported by the opensource kernel driver so that cannot be an issue either anymore. On the other hand I also have a AMD card which does not support hardware acceleration on Fedora by default because of mesa and I have to swap packages to add support which breaks dnf sometimes. So should I hate AMD now?
Deepin is pretty popular
Some hashing algorithms are suspectible to long password denial of service so it’s recommended to limit the length of password but certainly not to 20 characters but to a more reasonable limit, like 100 characters or so.
When I install a new software, sure I don’t start auditing the souce code but the developement of a software is a process and I trust that all the contributors and distributors have eyes on it and know what changes a release contains. It’s very hard to sneak in shenanigans into popular repositories. And an opensource software can quickly lose the trust of the community and get replaced if it makes bad turns. In non-free softwares I don’t have this assurance.
What would be the point of the sanctions then? If the Linux Foundation were against it they could move the infrastructure to an other jurisdiction which does not sanctize countries, that would carry a strong message. But if they refuse to do that, what’s wrong with others’ forking it and doing it? That’s the point of opensource.