I suggest that we include Pop!_OS in the other Linux distros being listed.
Encryption out of the box
Pop!_OS encrypts your installation by default and is the only Linux distribution that enables pre-installed full-disk encryption out of the box. A unique private encryption key is generated during setup after you receive your computer.
Update on Your Terms
Pop!_OS provides the latest features and security patches through rolling updates and periodic OS version upgrades, to be performed at your discretion. And if you want a clean slate, the Refresh Install feature resets your OS while preserving the files in your Home folder.
Automatic firmware updates can be accessed from your software settings on System76 hardware. These updates help to quash any threat of security risk to your computer
Pop!_OS does not collect or store any info from user installations. Minimal OS and hardware data are used—not stored—to provide updates and connectivity verification. Apps packaged through Flatpak require permission to access more than what’s needed to function.