>"have a sane userland (where programs don't run as root, when they don't need to and ideally have privilege separation)" On this point, have you considered us

>"have a sane userland (where programs don't run as root, when they don't need to and ideally have privilege separation)" On this point, have you considered using Snaps or Flatpak? Before Canonical pulled the plug on Ubuntu Mobile I believe they intended to use Snaps for most/all userland software. Though I'm not a Linux expert, it still seems like a solid idea.