so i've been fucking around with secureblue lately and holy shit, someone finally made a linux distro that takes security seriously. it's based on fedora atomic but actually has its head screwed on straight when it comes to hardening.
secureblue is basically what happens when you take linux and make it not garbage from a security perspective. it's an immutable desktop operating system that ships with actual security hardening out of the box...