ReallyOldLurker

There is an AppImage that you can try out if you don't want to do a full compiler, etc. download and install. https://github.com/timo/rakudo-appimage

You are speculating, not "investing", if you don't know the actual stock's name.

Because Windows 10 is an endless beta with forced updates/reboots.

also to add some items (of course this is all my opinion, so ignore it if you want):

- break up the script into modules and work on one at a time until its solid - don't assume that items like unattended-upgrades are desirable. In general, where you want to install more software than the user already has installed, it should be an optional module or prompted. Without that I wouldn't use this script for that reason alone. - some people have a purpose in using firewire and USB. Make it an option (my example: high end studio cameras) - consider reviewing https://wiki.mozilla.org/Security/Guidelines/OpenSSH and the release notes for the version of OpenSSH you are configuring. I wouldn't use your configuration. - why ask how many users to enforce diskquotas on and then ask for which user to enforce a disquota on? Simpler would be to read /etc/passwd (or count /home/<users>), provide a list to mark and then do it.

"Appimages are great but there's no sandboxing or updates"

Actually there is sandboxing and updates, if you want to take an extra steps.

I prefer AppImages over Flatpack and Snaps for essentially the same reasons commented above.

I typically launch them with Firejail for the sandboxing. i.e. "firejail --appimage /path/to/appimage" instead of just the appimage alone. Seems to work just fine. Firejail has additional options that can be done.

Some AppImage creators do provide an update method that can be installed using zsync2, but I've not tried it since the whole point is disposability.