One &quot;practical&quot; reason is that its relatively easy to make a Debian-based derivative distribution due to the large amount of prior art,  tools and manpower. Now, if we could integrate Qubes-style isolation with Debian then most of this could be ameliorated. :)