Fedora (Secure Boot + TPM + SELinux) vs Arch (CachyOS repos + Custom Kernel) on a ThinkPad T14s Gen 1 AMD — Which path to choose?
I'm in a total rabbit hole of indecision and need some outside opinions. I'm daily-driving a ThinkPad T14s Gen 1 with a Ryzen 5 Pro, and I just can't settle on a setup.
For context, I don't mind fixing minor issues or messing around when things break. I generally avoid random third-party repos and mostly stick to official ones or Flatpaks.
Basically, I'm torn between two paths:
Option 1: Fedora
The sheer convenience is super appealing here: Secure Boot out of the box, LUKS2 unlocked via TPM (so no typing long passwords at boot, but my data is safe if my backpack gets stolen), and SELinux doing its thing. Packages are fresh enough and maintenance is basically zero. On the flip side, it's just a generic kernel with no aggressive compiler optimizations.
Option 2: Arch + CachyOS repos
I'd go full raw performance mode here: pure rolling release, CachyOS optimized repos, and a custom CachyOS kernel to squeeze every drop out of that Zen 2 chip. But I'd have to kiss Secure Boot goodbye (setting up custom keys on a rolling distro is a pain in the ass), figure out disk encryption manually without a proper seamless TPM integration, and lose SELinux.
Here is my dilemma: Is the actual performance gain from CachyOS repos and custom kernels on a mobile Ryzen actually noticeable in daily use (browser, IDE, occasional compiling), or am I just overthinking it and should stick to Fedora's secure, hassle-free setup?
Let me hear your thoughts.