GrapheneOS-style sand-boxing for every app is long overdue in Linux. I'd love to have it's granular permissions for every single service. I'd love to have the battery management, the unified settings UI, the effortless disk encryption UX and key management.
Could you build it with SE Linux and a lot of glue? Yes, but nobody has. And doing it well, everywhere, would take a lot of hours.
You will never have a UI capable of encompassing all the settings available in Linux. You will only have a UI capable of configuring your desktop experience, which is just a small subset of the full Linux experience.
It's all in one place - I can't think of a single thing I would want to configure that isn't found in that one dialog. It doesn't always make sense, but it's searchable, and the search works.
Android is very good at exposing things like
* "which service may know the device location?"
* "which app accessed the microphone 2 minutes ago?"
* "which apps burn the most battery?"
All of those make sense on ChormeBooks, and all of those are difficult with Linux.
make menuconfigUnfortunately, not even close to being as comfortable to use as GrapheneOS, and still significantly less secure than it - even if we completely disregard the sad situation of hardware security on x86 (but can't blame QubesOS for that one).