From a security standpoint, Arch Linux is terrible, for example.
Any distribution worth its salt must include the following by default:
- Secure Boot
- SELinux or AppArmor
- Firewall
This rules out most “geeky” distributions that have neither Secure Boot nor SELinux or AppArmor.

