Why does the Umbrel App Store call clearnet hosts like apps.umbrel.com and getumbrel.github.io for various web resources (images/icons, scripts?).

[chokoboko]

This way umbrel.com and github.io (Microsoft) know when and from which IP address I use my node. Why not bundle all the resources into one package and distribute it as a whole?

[gavinowens]

I think at least part of it is to allow apps to update apart from the whole operating system. The others I don't know. I would prefer if there was a "paranoia mode" that prevented phoning home to Umbrel's servers. It would reduce functionality, but would be more private.