By compromises every distribution makes, I am referring to cases where one choice precludes another, and any distribution can choose just one. Security costs performance. It's hard to support 3d hardware with pure open-source drivers. Most distributions are fairly up-front about their project values so you can understand which way they will make these compromises.