I agree except crowedsec. The apps I use were frequently phoning home, causing all my devices to get banned by crowedsec. Setting up rules around it was just too painful so I got rid of it.
Gonna look into if I can set up fail2ban with it instead