The five major upstreams are Ubuntu, Fedora, OpenSUSE, Debian, and Arch. Three of those are corporate, two have some questionable security practices. So there’s no perfect distro.