My thoughts exactly. It may take more time to set up (I, for example, never got my laptop speakers working when I installed it there), and it may not have as much hardware support (a shitty old HP pre-built was giving me ACPI errors and refusing to boot; and yes, I had updated the BIOS), but update-wise, it's super stable, but also quite up-to-date. It's not crazy (kernel updates take some time occasionally), but it's a great experience, and the inclusion of runit is fantastic. Hearty recommendation.
I have a host list on my router. That always seemed like plenty (I block gambling and malware)