Still waiting to see what Tezos settles on officially, but as you are progressing now let me point you in a different direction:
alpinelinux.org Grab the EXTENDED x86_64 version
As you are already thinking in terms of a Tezos only device, Alpine will server you very well!
Alpine Linux was designed with security in mind
Alpine uses musl which can be difficult to wrap your head around at first, keep at it, come out the other side knowing how to do some amazing things.
As soon as Tezos finalizes we will launch an Alpine how to, barring any more hiccups from them that is.