Even a distro-specific script would do the job in many cases. Elementary is a good example of where some kind of advanced script/package setup could possibly r

Even a distro-specific script would do the job in many cases. Elementary is a good example of where some kind of advanced script/package setup could possibly replicate what the developers have done. What you mention regarding extending the idea of dotfiles to encompass applications/settings is exactly what I'm hoping will start happening rather than this saturation of distros that don't necessarily bring a lot to the table. As for security issues, yes that's always going to be a concern when you add new packages, but no reason why there couldn't be some improved process in place to let users know when they are straying off the path.