nixOS , because it's a completely atomic distribution, like a docker container OS style. You define the state of the system in a configuration file, which can even control the kernel, and you can switch to an older configuration file in any reboot. It's more of a pain than the others, but it works ok out of the box and when you fix something it stays fixed so you'll never end up in a situation where something breaks and you can't fix it.
Also, all the packages bring their own versions of their own libraries and directly link to them so they'll never break during upgrades, but conversely a lot of Linux installers that try to link to system libraries won't work.