And I guess, it is more about the security configuration than anything, and distros. Very few things have SELinux properly configured, for example

Graphene OS It's surprisingly functional, when paired with USB keyboard & mouse

The hardware macOS runs on is far more secure than other laptop/desktop platforms and macOS is the only OS available for it which uses most of the hardware-based security features. The issue is you're completely hard locked on Apple then. Choosing a desktop OS today is a losing battle. Desktop OSes...

Secureblue is decent. It is based on Fedora and they take some security elements from GrapheneOS.