I see often people say that the distro you are using doesn't matter. One can turn any distro into another. And I do not agree with that. If that was true, why do we even have so many distributions? I always said, if distros don't matter...
... why distro hop?
... why don't you use Ubuntu then?
... why don't you recommend Archlinux to a newcomer?
... why don't you use Kali Linux as a server?
... why don't you use Batocera or SteamOS as your daily driver?
... why do you trust a community distro more than a corporate distro? (or vice versa)
I don't think that distros only matter to newcomers. Maybe it matters for experienced users even more.
Being a "rolling release" has absolutely nothing to do with it. They still need to update their repositories and add patches to it.
No, the size of its dev team does not necessarily mean that they are behind with patching security issues. it depends on the commitment and skills of devs, and the community.
Sure - a one-man-band supported distro could do all that. But a larger distro with a dedicated security team will definitely do it better.