I would say the warranty is probably confidence that a percentage will last that long, and the amount they have to replace is cheaper than the business they lose not offering it.
edit: and no argument that companies are also working to make devices less repairable, i’m cynical that more often then not they are trying to design devices that last exactly as long as the warranty.
This is possible, and exact directions will vary on distribution of the vm client. I personally do this but with split horizon dns and dnsmasq on a vm.
impossible to leak is where it gets tricky, and that will require an understanding of networking in your distribution. there will also be tutorials on this, but it’s very easy to mess up.