The following processes usually run on a reMarkable.

The application running the UI and everything that makes the reMarkable what it is, is called xochitl and runs as root (PID 182 in the listing below) which is a slight security risk:

remarkable: ~/ ps
  PID USER       VSZ STAT COMMAND
    1 root     13136 S    {systemd} /sbin/init
    2 root         0 SW   [kthreadd]
    3 root         0 SW   [ksoftirqd/0]
    5 root         0 SW<  [kworker/0:0H]
    7 root         0 SW   [watchdog/0]
    8 root         0 SW<  [khelper]
    9 root         0 SW   [kdevtmpfs]
   10 root         0 SW<  [perf]
   11 root         0 SW   [khungtaskd]
   12 root         0 SW<  [writeback]
   13 root         0 SW<  [crypto]
   14 root         0 SW<  [bioset]
   15 root         0 SW<  [kblockd]
   16 root         0 SW<  [devfreq_wq]
   18 root         0 SW<  [cfg80211]
   20 root         0 SW   [kswapd0]
   21 root         0 SW   [fsnotify_mark]
   37 root         0 SW   [pxp_dispatch]
   38 root         0 SW<  [ci_otg]
   39 root         0 SW   [irq/70-wacom_i2]
   40 root         0 SW   [irq/131-2-0024]
   41 root         0 SW   [kworker/0:2]
   42 root         0 SW   [cfinteractive]
   43 root         0 SW   [irq/210-mmc1]
   44 root         0 SW   [irq/211-mmc2]
   45 root         0 SW<  [ipv6_addrconf]
   47 root         0 SW<  [EPDC Submit]
   48 root         0 SW<  [EPDC Interrupt]
   49 root         0 SW<  [deferwq]
   50 root         0 SW   [kworker/u2:2]
   51 root         0 SW   [mmcqd/1]
   52 root         0 SW   [mmcqd/1boot0]
   53 root         0 SW   [mmcqd/1boot1]
   54 root         0 SW   [mmcqd/1rpmb]
   55 root         0 SW<  [kworker/0:1H]
   56 root         0 SW   [jbd2/mmcblk1p2-]
   57 root         0 SW<  [ext4-rsv-conver]
   58 root         0 SW<  [brcmf_wq/mmc2:0]
   59 root         0 SW   [brcmf_wdog/mmc2]
   74 root      5944 S    /lib/systemd/systemd-journald
   94 root     10392 S    /lib/systemd/systemd-udevd
  118 systemd- 12688 S    /lib/systemd/systemd-timesyncd
  143 root      2780 S    /sbin/syslogd -n -C
  144 root      6940 S    /usr/sbin/wpa_supplicant -C/var/run/wpa_supplicant -iwlan0
  145 root      1952 S    /sbin/agetty --noclear tty1 linux
  146 root      2800 S    /lib/systemd/systemd-logind
  147 root      1952 S    /sbin/agetty -8 -L ttymxc0 115200 xterm
  148 messageb  4484 S    /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
  155 systemd-  3120 S    /lib/systemd/systemd-networkd
  156 root      2716 S    /sbin/klogd -n
  159 root      3508 S    /usr/sbin/dhcpcd -b --master wlan0
  173 root      2716 S    /usr/sbin/udhcpd -f /etc/udhcpd.usb0.conf
  174 root     10784 S    /usr/bin/qmdns-responder
  178 root         0 SW   [jbd2/mmcblk1p7-]
  179 root         0 SW<  [ext4-rsv-conver]
  182 root      182m S    /usr/bin/xochitl --system
  183 root     31364 S    /usr/bin/crashuploader --path /home/root/
  191 root         0 SW<  [kworker/u3:1]
  194 root         0 SW<  [kworker/u3:2]
  263 root         0 SW   [kworker/0:1]
  270 root      2604 R    /usr/sbin/dropbear -i -r /etc/dropbear/dropbear_rsa_host_key -B
  271 root      3112 S    -sh
  305 root         0 SW   [kworker/u2:1]
  326 root         0 SW   [kworker/u2:0]