>>13614243It's much easier to say what to go for.
Debian, Ubuntu, and Fedora are pretty much the only distros nowadays with the human resources (number of developers, proactiveness of developers, cluefulness of developers) needed to stay on top of security updates at all levels of the OS. Of those, Debian is the most respectful of privacy. Sure, you get little fringe distros with developers more focused on security and privacy than all of those three mainstream distros, but these fringe distros tend to become dead projects after a year or two.
The Hardened Gentoo profile of Gentoo used to be great, but it's become kind of pointless with the grsec patches going commercial, and Gentoo as a whole is a dying project without the resources that it once had.