This is the solution. Use the following web page to compare packages versions from Debian Testing and Fedora 40: https://distrowatch.com/dwres.php?firstlist=debian&secondlis...
And don't be fooled by the name of the release: "Testing". The name "Testing" exists due to an orthodox approach of Debian community that only the Debian stable can use "stable".
Sid [rolling] -> Testing [rolling] -> Stable [point release]
But there's been improvements. The winget CLI can now install and update several well-known applications, and even upgrade them when you first downloaded them any other way. There's also the MSIX package format, which is much closer to distro packages or mobile apps, can auto-update without a central repository and supports sandboxing.
Nowadays, even if still a bit hacky, I definitely consider Windows packaging less painful than the mess that is Linux distribution. Packages in distro repositories are regularly outdated, and every other package is installed misconfigured or has been patched in unclear ways by the distro maintainers; then there's Flatpak which make for gigantic installs with clunky sandboxing, or AppImages.
Usually it works like this (forced to use macOS at work and Windows from time to time for special software): One installs some software from trusted websites (VSCode, VLC, Firefox, etc.) on macOS/Windows, and then when one just wants to get some work done: Update-PopUps, yay. They annoy the hell out of me, especially because there is no unified system for macOS/Windows. Break my flow, wait for download, privilege escalation, installation and starting again. Thank you very much. This happens multiple times a week especially for packages like VSCode, VLC, Office, Outlook, Firefox, KeepassX, Calibre... packages which you don't want to be outdated, ever. It is f*cking ridiculous that I have to take care of this BS in 2024.
On my Linux boxes I login and work. Updates have been silently downloaded and installed for the packages and/or flatpaks and everything is up to date, no annoying update-popups which break my flow and I know that I have the latest version of all software especially security sensitive packages.
At the end, you can pick your poison.
Having integrated/working package management with silent updates is one of my killer features of Linux/Flatpak. I want to set it up one time (automatically) and never have to think about or deal with it again.