If you have a system where, as I understand it, the main point is to check who is standing in front of your door, and that system now is one automatic update away from dipping into your bank account... How long until the police departments figure out that donations to a specific company could be very profitable?
Don't do this; just create a new user and give it sudo privileges.
The utility of changing the SSH port is debatable, but it would lead to less noise in logs. Also, instead of limiting SSH connections to a source IP, you might consider putting the server behind Tailscale and only allowing incoming SSH connections over its interface: https://tailscale.com/kb/1077/secure-server-ubuntu (this also solves the logs problem)
Also, why do you think that it is better to not change the root password? It sounds like a very suspicious recommendation.
Now there are much worse cases out there, sure. But most Swiss citizens are not even aware of those laws.
Nor are they aware of how much the Swiss government has been trying to hide its incompetence regarding anything IT-related. Like data leaks happening several times per year.
So yes, a big percentage of those almost 50% of "no we don't want this" responses were about lack of trust in the different branches of the government.
Also allowing year round unrestricted hunting of these invasive pests would help.
People like guns and they love hunting. Some things they can only hunt at specific times....but if you tell them they could hunt as many as they want year round you would suddenly see a bunch of people figuring out how to hunt a snake with rifles or other weapons.
As an aside, and in a different, "Python Removal Agent" is certainly a worthy title for any of us.