If you want MAC (SELinux or Apparmor) (which I highly recommend) then use Silverblue / CoreOS or even SUSE MicroOS

otherwise I use NixOS. (But like I said, I’m possibly looking into switching because of lacking MAC)