Might be a really dumb question from some skid like me but: Do I actually need good Opsec for Osinting? Since it is should be legal to do so. And how about running Osint programs in Python? - Is this also legal or some sort of a grey zone? Thank you for your response. ;)

I do not understand your question. You should always have good OPSEC regardless :D

Also if the information is publicly available, its legal, if its obtained using malicious techniques, then its illegal.

Yes, I know of course, but my question is about the legality of doing osint