Comment by shubb

Take a Damm Small Linux. Package manager (apt) optional.

I do think a lot of what you are rejecting (automatic updates, centralised package signing, permissions) are solutions to security problems that you might actually have.