Same here, Debian since Squeeze. A couple of years ago I just decided to go a step further and go with Kicksecure. Which is basically just hardened Debian.