As a downside, any change to software, version updates, keeping things secure now depends on the team is experts. Most are easy, some are hard (e.g. new software now requires a new Swift version - one person motivated enough to do that project has been pushing it for months), some are annoying (patch to libc means you're re-downloading your whole system).

As a positive thing, maybe at least nixos will get a serious security pipeline rather than the current best-effort community approach.

Well that was the whole problem to begin with! A lack of experts. Hence they went with IBM and MicroSlop. These guys are late.