This is one of those reasons I decide to drink from water bottles.
Yes, there may be traces of antimony in it, but tap water, usually well controlled at the reservoire, presents too high a risk of exposure to various metals and bioforms due to decaying infrastructure.
Chroot as a lot of inherent security issues. Grsec has somr fixes for it, but iirc it is not proper to trust chroot to secure you against untrusted binaries.
This is my experience too, when buying a high-end laptop, I expect it to just work. If my time was worth dealing with shitty QA, I'd buy a low end laptop.