Hi,
I am a Linux user for fifteen years now, and an happy user of Refracta 9 for two (or three).  I just wanted to let you know i much i love it, and why.
First of all, security-wise, it is a boon to have it run in ram, to have firejail already installed with a firejail menu, to have Services which enables us to deactivate some services we do not use, such as cups, and plenty of others in my case.  Every time i have Refracta 9 up and running for days at a time, i make sure source.list has everything checked except security and i update my installation for newest security packages.  A very easy task, security-wise.  And i make sure i have latest instance of Firefox-esr installed too.

I do not install OS anymore.  I much prefer having my OS run in ram.  I have a 2tb hard drive installed lately instead of what i had (150 Gb), used only for storage.  It is at once more convenient and more secure that way. All my hardware run well with Refracta 9.  Thanks to developer for a well-rounded OS that i prefer over everything else.  I know for a fact that choosing a Linux OS is not an easy task, so much choice around.  Every OS competes with each other for your attention, and to make a decision you have to consider security, convenience, habits, your ram, your hardware.  With Windows, you make do with what it offers.  With Linux, you have to make a choice.  Plenty of choice.  It takes time to learn what you like and dislike in an OS.

As for Refracta 10, that is something else.  I still use Refracta 9, because the latest Refracta instance lacks some features i like.  No Service menu, updating packages is met with a problem : Firefox-esr does not upgrade itself due to corrupt files.  sudo apt remove --purge firefox-esr let me get rid of corrupt files  before installing Firefox-esr again.  But I decided to use Firefox portable, or chromium chromium-sandbox, for my web browsing needs while using Refracta 10 for a while.

Why change when Refracta 9 is so good you ask?  Because i wanted to use i2p.  I2P is not available with Devuan ascii repositories.  Before you ask, let me tell you that i2p is what you could refer to as security by design, you can do pretty much anything under the radar, including using a torrent client named I2PSnark.  VPNs are refered to as security by policy, you have to have confidence in your VPN service provider that it does not share your data with government agencies and/or commercial entities, which free VPNs do without any shame.

So I have tested Refracta 10, and found that it lacks the polish of preceding instance. I check if the developer of Refracta publishes another version from time to time, more polished.  Up to now, no new version.

But thumbs up for Refracta 9.  5 out of 5.
Refracta 10 : 4 out of 5