This has always been a thought of mine. I wanted to replace/remove any non-free kernels with a libre kernel that doesn’t provide non-free binaries. I know some people say it does not matter, but I think it would be a cool idea.
I was thinking about hardening QubesOS by possibly using a deblobbed version of the Kicksecure kernel on all VMs. It would also come with Javascript disabled entirely on all VMs, all non-free binaries removed, everything run over Tor by default, maybe creating a custom repo with only free software, etc.
This would be inclined towards people who use Libreboot/Canoeboot, specifically those that use systems like OptiPlex 9020 and T440p, that run only 100% free software in the BIOS.
I’ve never attempted it, but I would like to know if anyone would be interested.
That would be interesting. Maybe a separate ISO could be created for someone like you. The only issue with using OpenBSD instead of Linux is that OpenBSD’s network stack is much different from Linux’s, which could potentially worsen your anonymity because so few people use OpenBSD. For now, I would at least try to provide optional non‑systemd Debian templates with OpenRC or runit. I do love the minimilist setup though, your other ideas are definitely noted.