True, but at that point, every website I’ll ever visit and have visited in the past might be a threat, so that doesn’t really matter too much to me.

I’ve got several hits, but none of them have permission to request my location. If I understand the README correctly, that should mean I’m safe, right?

Hardly a surprise, since Windows 10 didn’t need new hardware to run. You could install it on anything.

Cookies required for the website to work (like that one) are totally fine and, in fact, they don’t even have to ask you about them - if they’re not used for tracking. So no, asking each time is definitely avoidable.