Nixos can be more secure than classic distros. First of all, you have atomic states of your system, so nothing can be added without rebuilding the whole system and giving it a new name
Also you can do impermanence to ensure nothing can slip in for sure, because the system will be recreated every boot