2. The Fedora minimal templates should be based directly on the Fedora minimal template.
3. VMs running Flatpak should be using Fedora instead of Debian for newer packages. I only use Debian for packages that I can get directly from the developer instead of through a third party like Signal, Element, etc.
4. The whonix hardening script should be run on both the workstation and gateway.