Because Linux +firefox is like a fingerprinting wet dream, I may be the only one in my locale. (maybe not anymore, but yeah)

Also Librewolf by default reports Win+Firefox.

Statcounter considers me a Win user due to the Win user agent I’m using, this is not a rare behavior in the Linux space…

Probably not significantly less secure than Xorg itself, I wouldn’t mind using in your place. DE security is usually not a huge problem, if someone can exploit these vulnerabilities usually you are quite bonked.

Remember most of what happens on screen is xorg, the wm is a simply interacting with xorg and other parts of your DE are simple user level programs like the panel etc…

These days it’s mainly snap and how you can type apt install and the system will do snap install instead, for firefox for example.

Read the arch wiki if you are in doubt, go through manual install once for experience, follow the arch wiki guide for that too.

Arch wiki is life, YT guides are basically useless for this.