Highlights Rust rewrite of GNU coreutils and sudo-rs TPM-backed Full Disk Encryption now considered stable More secure services (don’t run as root if not needed, AppArmor profiles) AppArmor prompting for snaps is still experiemental unfortunately