I don’t mean this as a gotcha, but have you tried an immutable/atomic Linux distro?

Immutable/Atomic Linux doesn’t take away any ability to hack and configure it. It’s just a different approach to package and update management.

There really isn’t anything you fans do with it that you can do on other Linux distros.

I’m using Bazzite which is basically in the Fedora Atomic family and all it really changes is that if I want to rpm install something and there’s no flatpak or AppImage then I just need to decide on my preferred alternate method to install it.

I find Bazzite’s documentation on the subject quite helpful: https://docs.bazzite.gg/Installing_and_Managing_Software/

At the very worst case I’m using rpm-ostree and installing the software “traditionally” and layering it in with the base OS image.

Now you might be thinking, what’s the benefit of going through all this? Well, I get extremely fast and reliable system updates that can be rolled back, and my system’s personalization and application environment is highly contained to my home directory.

I’m not an expert but I have to think that there are security benefits to being forced into application sandboxing as well. Applications can’t just arbitrarily access data from each other. This isn’t explicitly a feature of immutable/atomic Linux but being forced into installation methods that are not rpm is.