Watch for battery life when buying older Surface devices. Replacing batteries in the older Surface Pros is notoriously difficult, because apparently the whole assembly is glued together. Loss of battery life is what forced an early retirement of my 5th-gen (2015) Surface Pro, even though not was otherwise completely serviceable. Newer versions are apparently more repairable, but you’ll have to investigate where that cut-off line of repairability is.
I’ve used it off and on in KUbuntu for a couple of years without issue, installing the helper app from the .deb file directed to me by the plugin. I have scanned it for viruses and watched for strange behavior, and I haven’t observed anything suspicious. It runs as the current user, no elevated privileges required.