@nikolal
yep.
on on side tails have a reduced attack surface.
But on the other side you may need to install different packages and configure them in iptables with customized scripts at every startup.
kodachi looks more complete for my needs, but I will test it