Most places I’ve worked, has the concepts from above.
Security is lax at most companies but even having worked as an engineer on support rotation, customer anc production access was the last thing I could do and I needed to have exhausted all other options. I don’t feel retaining production access to generate tokens should be a thing.
And how exactly would you go about TFA's example of embedding the web ui inside a Golang application with NextJS?
I can think of LOTS of examples where you'd be better off with straight static server with React and a separate API server... pretty much anywhere you are doing a web application and don't need/want SEO/Bots.
Having used Linux recently, Zorin as well, what I found was that MacOS I don’t need to fight to get things done. Not just that, but the quality and support for apps I use is much better. Things just feel more coherent.
When things don’t work on Linux, the last thing I want to do is open the terminal.