Nice writeup. I had to do most of those things for my startup. I replaced the home screen in its entirety so there's no way to escape our app at all. If we need to administer it at all there's ssh installed. I just spent today building logstash-forwarder into the image so we can view logs from all devices in real-time.