If you are not prepared to spend the time to properly configure and sometimes build the system; I suggest it's a toy. Any critical applications or foreign code snippets included should be under your direct control. Want a more secure kernel compile it yourself and only include what you require. Just this step alone adds significant fortification as now most fingerprint based or script based software will often fail. It fails because expected conditions do no exist. It takes some time and effort regardless of the distribution. Some make compilations from source more difficult than necessary. In the end all distributions just like MS Windows are only the starting point. It is up to the user to make fit for purpose.