How does the immutability come into play with Nitrux vs, say NixOS?

I’ve read that systemd-homed can do encrypted home directories but I haven’t tried it, much less on WSL but that may get you to achieve the encrypted home directory at least.

Personally I don’t think I would have a need to encrypt all of WSL, but maybe that also makes sense for your case.

ArchWiki example: https://wiki.archlinux.org/title/Systemd-homed

Testing at 100% w/Firefox + ABP + AdGuard home DNSBL and upstream DNS blocking. Need to get uMatrix back on here.

I’ve used Arch, Manjaro, and Endeavour. For ease of use it’s between Manjaro and Endeavour and I’d pick Endeavour. Arch is great too. When you’re ready to go deeper, give it a shot.