This sounds like an advert for alpine Linux.

That said, the take away I think for most users is: software side good (selinux, firewall, sandbox).

Kernel stuff tread with care.