Anna

mutt or nothing

If you are a developer then no difference if you’re a scrum master then you need to gtfo

If you’re not going to give her sudo access then I’d say it’ll be really hard maybe even impossible to screw up. Also maybe setup a cron job that’ll do auto updates and if needed add in a check to make sure it isn’t uninstalling anything. Also how about immutable distro.

Heavily customized LFS

Obligatory https://xkcd.com/927/

I know nftable is more secure and robust but sometimes I feel like iptables is the way.