I wouldn't rule out a distro like Rocky Linux or AlmaLinux (or anything else based on RHEL) with Gnome or KDE installed. They will receive 10 years of kernel and OS security updates, and you can either use Firefox from their repos or use something like Flatpak or Snap to get newer software packages if necessary.