On Ubuntu, the NTFS driver (read and write) was installed and enabled by default since 2007.
It worked without problems and "compatibility issues".
It seems that this particular security problem occurred about ten years ago, for example:
_https://unix.stackexchange.com/questions/296967/how-to-recursively-remove-execute-permissions-from-files-without-touching-folder
_https://unix.stackexchange.com/q/296967
Nothing was done to fix it.
You may not believe, but computer science students (and their professors, perhaps), usually do not notice that this problem exists. They simply install Ubuntu and use it for their projects.
It might be obvious that this strange phenomenon correlates with pulseaudio and systemd.
It is very probable that it is a symptom of dementia caused by pulseaudio and enhanced by pipewire.

EDIT:
Because of dementia, it might be difficult to understand that what kind of security problem it is.
It is a backdoor in Devuan.

It seems that Stuxnet is already forgotten (because of dementia).

Uh-oh. How just inserting a USB drive can pwn a Linux box
_https://www.bitdefender.com/en-us/blog/hotforsecurity/uh-oh-how-just-inserting-a-usb-drive-can-pwn-a-linux-box

Researchers found 26 new vulnerabilities in the USB drivers used in Windows, Linux, macOS and other systems.
_https://www.hugdiy.com/blog/you-wouldnt-know-until-you-test-it-how-to-restore-all-these-usb-vulnerabilities/

You may post the output of this command:

fuser -av $(find /dev/snd -type c 2>/dev/null)

For example:

➤ fuser -av $(find /dev/snd -type c 2>/dev/null)
                     USER        PID ACCESS COMMAND
/dev/snd/controlC0:  igor       2235 F.... mate-settings-d
                     igor       2326 F.... mate-volume-con
/dev/snd/pcmC0D0c:
/dev/snd/pcmC0D0p:   igor       3201 F...m firefox-esr
/dev/snd/seq:
/dev/snd/timer:      igor       3201 f.... firefox-esr

And the output of

inxi -A

sudo apt install inxi

inxi: everything you need to know about your computer
_https://easylinuxtipsproject.blogspot.com/p/inxi.html

If you google "No suitable destination host found by cups-browsed," you get:
"SOLVED: no suitable destination host found by cups-browsed"
_https://forums.linuxmint.com/viewtopic.php?t=380704
“No suitable Destination Host found by cups-browsed”
_https://askubuntu.com/questions/1128164/no-suitable-destination-host-found-by-cups-browsed
and a lot of similar links

Possible solutions:

"...but i'm no expert at documentation or linux".

You can simply imagine that you are. It will work.
If you are a student, this is the best way to learn Linux.

Have you noticed that the Devuan wiki is almost empty?
It means that all knowledge might be forgotten because of dementia.

Since you are the only person who really knows how to write technical documentation, you may try to fill the Devuan wiki with exact technical knowledge. Perhaps, you should try, if you are a socially responsible Linux user.

@delgado

If you pretend to be more intelligent than AI, you may try to help MLEvD to solve the problem.

It is not exactly the case. ALSA was stripped off software mixer to be raped by pulseaudio. The problem is that the secret esoteric technology of configuring software mixers for ALSA was somehow forgotten, largely because of dementia, perhaps. If ALSA is such a problem, one may try OSS4. It is not very difficult to compile. The PKGBUILD and patches are available here:
_https://aur.archlinux.org/packages/oss-git

OSS was designed as a classical sound system. More exactly, it was the first one.
ALSA was designed as a sort of universal software mixer. That is why it does not permit "exclusive mode".
ALSA without a correctly configured software mixer is like a car without a motor and wheels.

@greenjeans

Coffee may not help, if you are not initiated into the secret knowledge.
You may better google "Anthropology of GNU/Linux".

Do you know another method to calculate dependencies  (>=) of Debian packages?
It might be very useful for verification.

$ apt-cache policy
...
Pinned packages:
     pipewire-pulse -> 0.3.65-3+deb12u1 with priority -1
     pulseaudio -> 16.1+dfsg1-2+b1 with priority -1    
     pipewire -> 0.3.65-3+deb12u1 with priority -1
     pavucontrol -> 5.0-2 with priority -1
     gstreamer1.0-alsa -> 1.22.0-3+deb12u4 with priority -1
     gstreamer1.0-alsa -> 1.22.0-3+deb12u3 with priority -1
     gstreamer1.0-pipewire -> 0.3.65-3+deb12u1 with priority -1
     pipewire-bin -> 0.3.65-3+deb12u1 with priority -1
     pulseaudio-module-bluetooth -> 16.1+dfsg1-2+b1 with priority -1
     gstreamer1.0-pulseaudio -> 1.22.0-5+deb12u2 with priority -1 

     
ALSA users have to install gstreamer1.0-alsa and remove gstreamer1.0-pulseaudio in order to improve sound quality with gstreamer.

OSS4 users have to remove gstreamer1.0-alsa and gstreamer1.0-pulseaudio. This automatically enables the gstreamer OSS4 backend (if OSS4 is installed).

gstreamer1.0-pipewire should also be removed.

The unwanted plugins should also be pinned.

There is a secret method with which to calculate the true dependencies of a Debian package.

Let us try it with the advanced music player for semi-deaf and semi-blind audiphiles:
_https://github.com/strawberrymusicplayer/strawberry/releases/download/1.2.11/strawberry_1.2.11-bookworm_amd64.deb

➤ dpkg --info strawberry_1.2.11-bookworm_amd64.deb | grep Depends -B5
 Package: strawberry
 Version: 1.2.11-bookworm
 Architecture: amd64
 Maintainer: Jonas Kvinge <jonas@jkvinge.net>
 Installed-Size: 13929
 Depends: libasound2 (>= 1.0.16), libc6 (>= 2.34), libcdio19 (>= 2.1.0), libchromaprint1 (>= 1.3.2), libebur128-1 (>= 1.1.0), libfftw3-double3 (>= 3.3.10), libgcc-s1 (>= 3.0), libgdk-pixbuf-2.0-0 (>= 2.22.0), libglib2.0-0 (>= 2.51.0), libgpod4 (>= 0.7.0), libgstreamer-plugins-base1.0-0 (>= 1.0.0), libgstreamer1.0-0 (>= 1.6.0), libicu72 (>= 72.1~rc-1~), libmtp9 (>= 1.1.0), libpulse0 (>= 0.99.1), libqt6concurrent6 (>= 6.1.2), libqt6core6 (>= 6.4.0), libqt6dbus6 (>= 6.4.0), libqt6gui6 (>= 6.3.0), libqt6network6 (>= 6.4.0), libqt6sql6 (>= 6.1.2), libqt6widgets6 (>= 6.3.0), libsqlite3-0 (>= 3.6.11), libstdc++6 (>= 11), libtag1v5 (>= 1.11), libx11-6, libqt6sql6-sqlite, qt6-qpa-plugins, gstreamer1.0-plugins-base, gstreamer1.0-plugins-good, gstreamer1.0-alsa, gstreamer1.0-pulseaudio 

What is obviously wrong is the dependency on "gstreamer1.0-alsa, gstreamer1.0-pulseaudio".

Although it is immoral to deceive the deaf, blind, and demented, Linux users are often fooled about pulseaudio dependencies. Therefore, you have to be paranoid and constantly verify the dependencies of Debian packages.

Open the fakeroot console:

➤ fakeroot

# mkdir debdir

# ls -1
debdir  
strawberry_1.2.11-bookworm_amd64.deb

# dpkg-deb -R *.deb debdir

# mkdir debian

# ls -1
debdir
debian
strawberry_1.2.11-bookworm_amd64.deb

# echo -e "Source: strawberry\nPackage: strawberry\nDepends: \${shlibs:Depends}" >> debian/control

# cat debian/control
Source: strawberry
Package: strawberry
Depends: ${shlibs:Depends} 

Run "dpkg-shlibdeps" to calculate the true dependencies

# dpkg-shlibdeps -v -xstrawberry --ignore-missing-info -e $(find debdir -type f 2>/dev/null) 

The result of calculations is written into debian/substvars

# cat debian/substvars
shlibs:Depends=libasound2 (>= 1.0.16), libc6 (>= 2.34), libcdio19 (>= 2.1.0), libchromaprint1 (>= 1.3.2), libebur128-1 (>= 1.1.0), libfftw3-double3 (>= 3.3.10), libgcc-s1 (>= 3.0), libgdk-pixbuf-2.0-0 (>= 2.22.0), libglib2.0-0 (>= 2.51.0), libgpod4 (>= 0.7.0), libgstreamer-plugins-base1.0-0 (>= 1.0.0), libgstreamer1.0-0 (>= 1.6.0), libicu72 (>= 72.1~rc-1~), libmtp9 (>= 1.1.0), libpulse0 (>= 0.99.1), libqt6concurrent6 (>= 6.1.2), libqt6core6 (>= 6.4.0), libqt6dbus6 (>= 6.4.0), libqt6gui6 (>= 6.3.0), libqt6network6 (>= 6.4.0), libqt6sql6 (>= 6.1.2), libqt6widgets6 (>= 6.3.0), libsqlite3-0 (>= 3.6.11), libstdc++6 (>= 11), libtag1v5 (>= 1.11), libx11-6 

Now, with the help of a text editor, you can simply replace the false "Depends" with the  true "Depends".

nano debdir/DEBIAN/control 

It should look like this:

# cat debdir/DEBIAN/control | grep Depends
Depends: libasound2 (>= 1.0.16), libc6 (>= 2.34), libcdio19 (>= 2.1.0), libchromaprint1 (>= 1.3.2), libebur128-1 (>= 1.1.0), libfftw3-double3 (>= 3.3.10), libgcc-s1 (>= 3.0), libgdk-pixbuf-2.0-0 (>= 2.22.0), libglib2.0-0 (>= 2.51.0), libgpod4 (>= 0.7.0), libgstreamer-plugins-base1.0-0 (>= 1.0.0), libgstreamer1.0-0 (>= 1.6.0), libicu72 (>= 72.1~rc-1~), libmtp9 (>= 1.1.0), libpulse0 (>= 0.99.1), libqt6concurrent6 (>= 6.1.2), libqt6core6 (>= 6.4.0), libqt6dbus6 (>= 6.4.0), libqt6gui6 (>= 6.3.0), libqt6network6 (>= 6.4.0), libqt6sql6 (>= 6.1.2), libqt6widgets6 (>= 6.3.0), libsqlite3-0 (>= 3.6.11), libstdc++6 (>= 11), libtag1v5 (>= 1.11), libx11-6 

When dependencies are corrected, you can build the package:

# dpkg-deb -b debdir strawberry_1.2.11-devuan_amd64-fixed.deb
dpkg-deb: building package 'strawberry' in 'strawberry_1.2.11-devuan_amd64-fixed.deb'.

Exit fakeroot console:

# exit
exit

Now, you can install Strawberry with true dependencies:

sudo dpkg -i strawberry_1.2.11-devuan_amd64-fixed.deb 

The question remains: what is the origin of pseudo-dependencies in Debian packages?
Obviously, they are man-made rather than naturally produced by invisible magic forces.

Debian packages can be build manually in an old-fashioned way (e.g., with dpkg-deb), without the help of the "debhelper". However, the Debian packaging system is also capable of producing pseudo-dependencies. You can simply add such dependencies into debian/control, for example:

Depends:
 ${shlibs:Depends},
 ${misc:Depends},
 pulseaudio

Then, build the package with "dpkg-buildpackage -us -uc -b". It will produce a Debian package which depends on pulseaudio.

@stopAI

I didn't expect that anyone would be interested in Debian packaging.

Have you tried to compile fftrate?
The updated manual is here:
_https://dev1galaxy.org/viewtopic.php?id=7142
The user manual is here:
_https://dev1galaxy.org/viewtopic.php?id=6644

It will improve sound quality of your pipewire.
You can test it with and without fftrate. The difference should be obvious.
Although, of course, it will be much better without pipewire and pulseaudio.
To disable fftrate, you can simply remove/rename ~/.asoundrc
And, by renaming, you can enable it again.

@greenjeans

If you are going to compile X-apps, you may try first to compile XED.
If it works, you may try to compile them all.