Removing Unnecessary packages (specially if they are not default in upstream and/or has issues like stopped development, less secure or producing too many issues).
Adding necessary packages for better security or usability (as long as they are not harmful).
Removing packages:
Remove wget since its not upstream default and less secure than curl (kicksecure support scurl), OR replace it with the successor wget2.
Can been seen added as extra package for debian stable:
That would be nice but anon-connection-wizard isn’t compatible with Kicksecure yet. Help welcome.
Meta package non-qubes-vm-enhancements-guiDepend: on it. So it’s installed by default in Kicksecure. But not in Kicksecure for Qubes. That’s on purpose. In Qubes, device encryption would be handled differently and no device would be attached directly to a Kicksecure based Qube? Seems a pretty specific use case. In which case, it would be up to the user to set that up