My problem is that both KDE and Gnome do not stabilize their API like X11 did. Although Gnome API appears a bit less changing than KDE. Packaging-wise, both KD

My problem is that both KDE and Gnome do not stabilize their API like X11 did. Although Gnome API appears a bit less changing than KDE. Packaging-wise, both KDE and Gnome suffered equally (despite Gnome-dev's huge resistance to do many-package approach). I favor the KDE approach to minimize presence of untested bloatware. Right now, I have been fighting vulnerability abuse against dbus usage of both KDE and Gnome (by red team) so I've settled on Xfce for now. (My friends have been suggesting Cinnamon/Mint so my early eval seems promising after having applied basic Whonix/CISecurity lockdown).