No, it’s also for your system to use locked versions of deps, so if you git clone you get a flakes.lock as well with all the versions. When you install from a git repo you get the same system again

I think the verdict is NixOS is perfect for desktops, since you probably don’t care about data or compiling everything or slight inefficiencies

You cannot target Russian DNA. For starters, it’s very similar to Ukrainian DNA…