#fedora is nice, but it's clearly meant to be a workstation distro, not a desktop one
having #selinux in enforcing mode by default clearly implies that the intended mode of use is "any custom service that may be used would be first deployed by the sysadmin, then have the proper selinux policy written for it, then deployed onto the workstations"
and i don't have the skills to write proper selinux policies, at least not yet, my goal is to let dad have a desktop OS he can safely update via GUI, not manage a hundred workstations
gonna try #OpenSUSE next, i guess