could an persistent Kicksecure .img be made using TailsOS live USB? How about
on a Pi? is it more desirable to do this using debian on a persistent disk?
In theory, yes.
In practice, won’t happen.
Please don’t ask for technical details as it will lead nowhere.