Afaik apt-get upgrade would not add or remove packages, where dist-upgrade would. However apt upgrade will install new packages but not remove any. Where full-upgrade (new naming, but dist-upgrade is also kept for the same function) will also remove packages.

Good post. And i would like to add for anyone to be able to use hypervisor escape, you also need a vulnerability in the software presented to the internet. And even then, the chance that anyone would waste a zero day on a homelab is pretty slim…

Are you talking about the + register? You could also map this to be the default “yank” register.