digital privacy and security
I bet there is an amalgamation going on there.
People who wants to maximum amount of security might not care as much about privacy, thinking relying on a famous actor which spends a ton on security (and runs ads to say so) give them privacy, typically Google or Meta, while ignoring their interests in using private data for profit.
The other way around some people claim they cherish privacy, which sounds like your uncle, yet can not realistically achieve it by using outdated systems leading to poor security and thus potentially bad privacy.
The 2 go hand in hand yet are different.
Ugh... why? I mean it's a fun process to distro hop and better understand the different package managers, boot process, default services, etc but beyond that I'm confused at what the point is.
FWIW one can distro hop "virtually" in minutes using containers via Podman or Docker (or even QEMU to be more isolated) with images that do have a window manager, e.g. https://docs.linuxserver.io/images/docker-webtop/ provides Alpine, Arch, Debian, Enterprise Linux, Fedora and Ubuntu with i3, KDE, MATE or XFCE. Switching from one to another takes minutes (basically download time of image content) and if you mount the right directory you can even use your own content for your tests.
Edit : if one wants to install nothing https://distrosea.com/ is quite neat but it's online.