Towards the bottom of that page is a tree with all the replies in the chain.

Here is one where they determined it was not malicious by examining the ref logs

https://lore.kernel.org/all/20250601-pony-of-imaginary-chaos-eaa59e@lemur/

I’ve used these tools to remove stuff from git history (e.g. someone accidentally committed a password or key that wasn’t noticed for a while) and they are powerful but scary. Good discussion on what when wrong and how to avoid it or at least notice it before it gets this far

I have a 2-in-1 laptop that folds with a touchscreen and Debian has been good for me. Sometimes I have to toggle the auto-rotate on the screen on and off to get it to work again but I doubt that issue is Debian specific. I don’t know about a stylus but even if Debian doesn’t include drivers for it, installing proprietary drivers manually isn’t that bad.

My specs are worse than yours and it runs fine for productivity stuff. I use it for writing, spreadsheets, some web tools, and notes / references while running tabletop games.