You’re on the right track! That feeling of understanding less is normal - and good news is that it isn’t true. You understand more than you did before - but now you also know of some other things you don’t know about yet. This is good and exciting! I wish I were in your shoes so I could experience this for the first time again.

I would recommend Fedora Silverblue 38. It is an immutable OS, meaning that it is impossible to break it to the point where it doesn’t work. Since the root file system is read only, like a mobile OS, you would be hard pressed to actually break it. Don’t worry though, most graphical applications are available as flatpaks on Flathub. Flathub is integrated with the app store in Fedora 38, no need to use the terminal. For terminal applications you want to use there are toolboxes, which are little mini fedora containers that have access to your home directory and some other integrations. Also Fedora Silverblue is easy to install and works with most hardware.

Does Debian let you specify regulatory compliance at install time? Or is it a do it yourself manually situation where you write an Ansible playbook.

I’m also moving away from RHEL. I have 3 RHEL servers right now, a hypervisor host, a podman vm, and a Samba share vm. I really liked that you could specify regulatory compliance at install time. Makes it really easy for standing up compliant servers. Are there any distros that do something similar?