NewOldGuard [he/him, they/them]

So aurora with micro g is more private in the sense that you’re not required to have a google account which would be used to track the apps you use etc. But sandboxed google play on GrapheneOS is significantly more secure. It requires fewer privileges than microG, operates in a much stricter sandbox, and performs checksum verifications on your downloads to ensure they are legitimate. Aurora is hypothetically vulnerable to man in the middle attacks since it doesn’t check the file’s hash

Default Fedora workstation and Silverblue do it this way. First boot prompts you to create an account and set it up, then lands you on the desktop and asks if you want a tour of the UI

I don’t have experience with dual GPU laptops but from what I’ve heard PopOS handles them really well. They also have an image with the nvidia drivers preinstalled which should make the setup process straightforward

Edit: I also found this github repo which documents some fixes for issues on that device specifically. Not sure how many of these have been patched upstream by now but it’s worth checking out.