You have some decent hardening, just note x11 is turning legacy, wayland seems to be picking up for many reasons. I’m only slightly familiar with Debian as a whole. I’d look into firejail, app armour, firetools GUI for Firejail, flatseal, and good backup plans.

I discovered NIXos a few days ago and while it was a steep learning curve to set up! And I mean a learning curve and steep in all senses. It’s quite possibly the smoothest, simplest distro I’ve ever used once you make it run. Instant rollbacks in grub. It boots in grub in order. Boot 23 works you tried tweaking boot 24 failed, you made it work boot 25. Got mad. Select boot 23 in grub and your back to square one. 10 seconds.

Due to the nature of it you can choose like any desktop type you’d like from xfce to cinnamon or names I never heard of even headless, and literally any of them gnome, KDE, you name it. I like simplicity. Low mental load. Immutable is a chef’s kiss but configurable strikes my fancy.

I loathe getting scattered it symlinks, scripts, having files I forget about scattered all through my system, shit updates and breaks because I firejailed an app from 2 years ago. So much hassle. I like to boot and go. Keeping all if my configs in literally 2 nix files is fantastic, no more where did this go, or where did this write to. It will never change, update and break, it’s like a master key that will forever work. Just don’t lose your config and any hardware, any time, if you have your master file you can boot in like you was at your machine the time you left.

I still think about my first love, Linux mint so I installed cinnamon and now I feel I got the best of both worlds. I nearly gave up after a few days OK like 4 or 5 lol of attempting a custom install of NIX, full luks from boot to home, all my installed apps and configs, separated partitioning, containerized apps, I went all out. Idles at 1% CPU themed and applets, desklets, conky, etc. Created a couple copies of my NIX config file and I feel fairly safe. I built it all and tweaked then compiled it all finalized. Once you understand the concepts in their coding style, it’ll click in your brain.

I went straight from Windows, to Mint for 2 years barely touching terminal. Now with a little internet research for commands. I can crawl through almost any issue. I’ve broken so much stuff. But atleast it wasn’t a windows update borking/bricking my entire PC into a paperweight again. I chose to experiment. I’ve cussed myself so many times. But anything is better than going backwards.

I didn’t know it existed. Whoops. I will definitely check it out over silver blue.

I’ve heard good things about work-station. I’ve really been distro shopping and that’s the great thing about the Linux and open source community. Having all the options! That being said I think it’s a big part of the lack of cohesive expansion too. Going too wide instead of deep. So projects don’t last unless their big. Like Ubuntu or Debian etc