Also, something just crossed my mind when trying to update as per recommendations here:
The Qubes Updater doesn’t provide an option to use the security-testing repo (or any other repo, for that matter), and use of the CLI command, sudo qubes-dom0-update, is being actively discouraged due to various issues. As far as I can tell after skimming the Salt documentation, users can’t choose their repo using this method either.
Any recommendations for nervous laypeople?
Also, how is one supposed to download, say, the Whonix template from the community templates repo without the CLI?