I remember being able to create a persistent drive using Rufus and Linux Mint (Not the Debian edition though) , Rufus has a slider for creating a persistent drive when burning the iso, pretty sure you can find some guide online

Not sure about the security, but recently I’ve tried runit on a very old laptop with HDD and it took waaay much less to fully boot up than a clean Arch32 with systemd