@hansw I didn't knew bout openelec/libreelec until now. It seems that the first is discontinued since 3 years ago, according to the wikipedia.

On the other side, I can't find if libreelec is debian-based, so it is an unknown for me how easy would be to set up the VPN afterwards.

Being #kodi in the debian archives, I'd go with it, but of course that would be my personal bias.