Probably not best practice, but I automatically check Block Common Exploits and Web Sockets every time because I’m lazy. Works every time.

Not sure what Cache Asset does, but I can guess from the name. I leave this one off because my NPM runs on a VM with not much storage

This tempo. Yes it’s an in-development android client that I’m transitioning to myself. So far so good