So weird.
Can you try safe mode with plugins disabled too, and share the HTTP status + Location header (you’ll see this in your browser network tab) for /, /categories, and /latest as an anonymous user?
Depending on whether it’s a 20X, 30X, or 40X it can tell us different things.
Like for example if it’s OpenID or certain category permissions.