Ubuntu has lots of releases, so you don't need to sit on a broken piece of technology for ages. Oh and there is no gnome-shell in Debian stable.

Imho using an Ubuntu release is gradually easier than following Debian testing.

And Ubuntu is security hardened. Take a look at this list, Apparmor, stack protection, (more) secure sysctl settings:

https://wiki.ubuntu.com/Security/Features