I would say that something like seL4 muslc and Gnu/BSD/Toybox user-land would make a good base for security to start with...bit like Genode