I am also using this setup powered by chezmoi. It has brilliant secrets support and powerful templating allowing cross-platform setups.
I do get lost in its state sometimes when updating `run_once_*` scripts and trying to make sure they still run.
Another friction point is external tools installed via .chezmoiexternal.toml from GitHub.