Nix is bad because the language is very limited and extremely hard to debug and the module system is fragile and obscure (just try to write a recursion-safe mkMerge and prove it won't magically drop some parts of your config because the values in the module system are always magic attrsets, not values), but, unfortunately, there is nothing better around.
Update once per year.
> brew, distrobox, flatpak
You can have that stuff on Nix if you need it.
Nix is bad because the language is very limited and extremely hard to debug and the module system is fragile and obscure (just try to write a recursion-safe mkMerge and prove it won't magically drop some parts of your config because the values in the module system are always magic attrsets, not values), but, unfortunately, there is nothing better around.