Any version of Ubuntu: Edubuntu, Kubuntu, Lubuntu is already malware

Yes, 100% - last reports were battle tested gnu coreutils were "improved" with a rust suite and important crypto now broken. Stop letting mentally ill individuals engineer your os.

Xubuntu Ribbed malware for our pleasure

I never understood the point of any * based distro when there’s the original one. Debian always has been a better option than any of those