

The link is benchmarks for the amd64v3 micro-architecture, not specific to Ubuntu. CachyOS repositories also have a bunch of packages that you would otherwise use the AUR for on Arch. An example: https://packages.cachyos.org/package/cachyos/x86_64/euro-office-bin

The devs haven’t said anything about this one AFAIK, though we can at least look at last year’s AI-found LPEs.
Secureblue mitigated Copy Fail and blocked the xfrm-ESP exploit path for Dirty Frag. You can read more about it here.
Kicksecure did neither, as SUID and unprivileged user namespaces aren’t disabled by default. You also can’t selectively enable user namespaces after disabling it, which worsens security for web browsers and breaks some stuff.