Dude in the thumbnail is Samy. He's been a bond villain for a long time now.

Joplin can do all that and has: Plugin support for nearly anything you want Runs on sqlite if you want to access the data direct Is 100% open source.

Ytdlp then ffmpeg convert to diff format or bitrate. No virus can survive that. Pulling from ph should be safe enough.