Is debian with hardened kernel and full disk encryption the best option for a librebooted thinkpad x200?

I want to libreboot a thinkpad x200 and mainly use it for privacy, originally i wanted to use QubesOS but Qubes sadly doesnt support x200, and x230's are expensive in my area. So now i'm thinking debian with hardened kernel and fde. Is it the best option or should i consider some other ones?