There is no god on Wayland.
mudamuda
NixOS learning curve maybe is not so hard. You can start with default configurations and installed Calamares what is as simple as on other distros. Than look for options and try.
Otherwise, Flatpaks are reproducible (build with flatpak-builder as on Flathub).
I'm sick of all the attempts to whitewash the recent Red Hat move. This makes things only worse. Fedora will not be affected, Alma has a bright future, CentOS is open to all, "rebuilders", clones...
Major: Debian, Gentoo, NixOS, Arch and also FreeBSD (not GNU/Linux but still).
Other and esoteric: Void, Alpine, Solus, CRUX, Slackware, Mageia/OpenMandriva,
Corporate sponsored: Fedora, openSUSE
Sun is now Oracle anyway.
Maybe it's just a general habit of mine that I keep minimum things open at time and close everything after use: desktop windows, android apps, browser tabs. So I use up to 3-5 dynamic workspaces most of the time.
I switch between apps from overview or by typing in search, or by sliding between workspaces. It is more convenient to me than classic desktops with a taskbar and minimized windows.
Always has been.
But to be fair, openSUSE was my first linux distro after Windows and YaST had been helpful to me before I learned how to use console commands. And then I switched to another distro.
I you are asking about permissions so yes. I often limit access filesystem paths, dbus proxy, devices and network.
Flatpak was started by RH employee but has been developed with significant community effort.
Flatpak uses ostree, which was originally created in GNOME for GNOME OS. And GNOME has contributors not only from RH but form Endless, Collabora, Purism and others.
Flatpak can work with OCI remotes, this is what RH more interested in. And Flathub uses only ostree. OCI remotes are used in Fedora Flatpaks repacked from fedora packages with the runtime based on fedora. But who use it anyway.
Flathub itself is independent community effort. It uses org.freedesktop.Platform based runtimes which are not based on any distro.
XDG Portals are shaped by Flathub maintainers and applications developers where RH also doesn't play significant role.
I use flatpaks mostly. Flatpak dependencies (runtimes) are stored separately from the host system so and don't bloat my system with unwanted libraries and binaries. App data and configs are stored separately and better organized. Everything runs in sanboxes. I use overrides extensively. All these are very convenient for me.
It is a hard pill to take.