This has always been a thought of mine. I wanted to replace/remove any non-free kernels with a libre kernel that doesn't provide non-free binaries. I know some people say it does not matter, but I think it would be a cool idea.
I was thinking about hardening QubesOS by possibly using a deblobbed version of the Kicksecure kernel on all VMs. It would also come with Javascript disabled entirely on all VMs, all non-free binaries removed, everything ran over Tor by default, maybe creating a custom repo with only free software, etc.
This would be inclined towards people who use Libreboot/Canoeboot, specifically those that use systems like OptiPlex 9020 and T440p, that run only 100% free software in the BIOS.
I've never attempted it, but I would like to know if anyone would be interested.
While it all sounds very promising, but it is a huge project. You can do it once, but are you willing to maintain itforthe next 10 years? Keep up with updates, patch vulnerabilities, find vulnerabilities and all of that? Of not, it is likely not worth it.
save