> However, while I love the approach of having an immutable distribution, I don't see the attack vector of ransomware handled in a good way

The phylosophy of security in "modern" OSs is to protect the OS from the user. The user is evil and, given so many rights, it will destroy the (holy) OS. And, user data ? What user data ? /s