Ok, I understand what you meant, thanks.

Basically, after I’ve read all of that, it’s clear as day that security is not a priority on Testing. And while band-aid solutions do exist, it’s simply not designed to be secure.

Yeah, I wouldn’t run it in a production environment.

Sure, but even in those “few cases” Testing will get them soon.

I did read at some point that Testing may receive security updates later than stable, might be in those cases in which backports come straight from unstable.

I don’t recommend going for (Debian’s/Devuan’s) testing (branch) as it targets a peculiar niche that I fail to understand; e.g. it doesn’t receive the security backports like Stable does nor does it receive them as soon as Unstable/Sid does. Unstable/Sid could work, but I would definitely setup (GRUB-)Btrfs + Timeshift/Snapper to retain my sanity.

From https://backports.debian.org/ :

Backports are packages taken from the next Debian release (called “testing”), adjusted and recompiled for usage on Debian stable

So by definition, security backports in stable are present in Testing in the form of regular packages, right?

Makes sense, thanks.

New to Linux: in which case would you stick with an “old-old-stable” release?

Software incompatibility?

Makes sense, thank you for the clarification.

It is also a file browser.

And apparently also supports FTP/SFTP, quite nifty.

I’m new-ish to Linux and new to Debian, but I literally just did a (second) Debian 12 install, so I have one note about your Firefox’s documentation, specifically about “chromium’s suggestion” when uninstalling Firefox. https://makedebianfunagainandlearnhowtodoothercoolstufftoo.computer/doku.php?id=start:firefoxesr

Besides Firefox ESR, it came bundled with “Konqueror”. Don’t know if it depends on your installation’s configuration, though. I selected to install “non-free” software, if it helps. So for me it didn’t complain when I uninstalled Firefox ESR, it just set Konqueror as the default web browser