Looking forward to trying Endeavour.
In terms of VLC from what the devs have said, the problem is actually in a library that was patched over a year ago. There was never a CVE assigned so the likes of Debian 9 and Ubuntu 18.04 never updated as they didn't know it was necessary for a security issue.
The social network of the future: No ads, no corporate surveillance, ethical design, and decentralization! Own your data with Mastodon!