Well, raspberry pis have a CSI port and is based off a recent debian release. If you want something newer than raspberry pi os then you can run debian or arch

Well, raspberry pis have a CSI port and is based off a recent debian release. If you want something newer than raspberry pi os then you can run debian or arch with a cron job to update and reboot. Not pretty, not reliable, but surely more secure. Though the best thing is to air-gap or at the least firewall.