As someone who does do a lot of embedded work professionally, including custom kernel development and security research, I don’t think the developers of the distro really understand what they wish to accomplish. They don’t understand the technologies they are working with and how it fits into a good security posture. Let me cherry pick some examples from their website:

Torified operating system (apt) upgrades

Routing your upgrades through Tor seems really silly to me. Your packages are already authenticated using strong cryptography, and if you’re concerned about Debian core repositories signing packages with their keys just to target you in particular, use a mirror. There’s plenty of them. Debian maintainers won’t know what you’re downloading, and if you fear the maintainers as part of your threat model, then perhaps a Debian-based distribution that implicitly trusts those maintainers is the wrong choice.

TCP Initial Sequence Numbers Randomization prevents TCP ISN-based CPU Information Leaks; see footnote.

Okay… that seems rather contrived. They don’t cite any sources, and I’ve never heard of this being a security concern.

Better encryption is achieved via preinstalled random number generators.

Woah, “better” encryption! That’s a pretty extreme claim without establishing that there’s anything wrong with how Linux already generates random numbers, which has been extensively studied and attacked. I’d be way more shy of their tweaks introducing security bugs. Do not get creative with cryptography.

I can’t take their work seriously, I’m sorry. It sounds like a lot of hope and not a whole lot of experience.