Hi there,
I’m really not sure. In your use case, does the end-user still need to use Jupyter? If you just want to have 1 application exposed, you could employ some firewall rules and close off all ports not related to that application.
For example, you could have a Voila dashboard running on the board and have the user connect to that, but since dashboards prevent you from executing arbitrary code they would only be able to interact with the widgets you provide.
I’m not too well versed on encryption. From what I know, on ubuntu, you have an option to encrypt your drive during install. Don’t think we have this on PYNQ.
Thanks
Shawn