@lina Ugh. I went to the folder with LOR threads, wanting to prove a point, and almost died of puking. The tl;dr of what I meant to say would be that the so-called security in those “secure” distros is relative. I doubt that anyone actually crawled the OpenSSL code with a loupe trying to make sense of it. I had an acquaintance there and he said that he simply runs long automated tests over and over again over new releases. So I presume that they presume the software is a black box, even though it’s open source. You’d have better chances avoiding a backdoor by using half-broken niche replacements for popular libraries and software. Some obscure browser like links and uclibc for libc. Keep your ports closed, too, and run windows software detached from network. Firejail any messaging program. That’s not all, but the bare minimum in addition to just running Linux.