Good stuff!
socat RAM waste should be sorted after the upgrade of anon-ws-disable-stacked-tor, which was just now uploaded to all stretch suites. (As long as 14 is testers-only, fast/risky package migration is a necessity.)
( port anon-ws-disable-stacked-tor to systemd socket activation )
krunner, all for getting rid of it. Was deactivated in Whonix 13 by package kde-lowfat. Got probably broken due to KDE upgrade of stretch. kde-lowfat was merged into anon-apps-config. Relevant files:
anon-apps-config/usr/share/anon-apps-config at master · Whonix/anon-apps-config · GitHub
Any idea how to get rid of it?
More stuff to work through from your post. 