What are we comparing, a Debian installation which follows the debian guidelines of sane defaults vs? The point of debian is that mis-configuration is either b

What are we comparing, a Debian installation which follows the debian guidelines of sane defaults vs? The point of debian is that mis-configuration is either bugs or explicitly done by the user. A good example is ssh which do not allow root to log in by default.