Kicksecure ARM64 SBC deployment?

I was lurking around different places and researching a future RPI or other board to deploy a server setup and read here Kicksecure ARM page that dracut is one of the main underlying issues if my understanding is correct?

Two questions I have are:

1. Should kicksecure-baremetal-server be fine if the base is rasbian or armbian?

2. What is the difference between “baremetal-cli” and “baremetal-server”? Previous I had the pleasure of installing the later (CLI) on a debian desktop VM for testing purposes since didn’t want GUI changes. I don’t see any mention of what SERVER does vs CLI version?

GUI: Installs the LXQt graphical desktop environment (graphical user interface (GUI)), default applications and command line interface (CLI). This is useful if Debian was installed without a graphical desktop environment and you want the Kicksecure graphical desktop environment (LXQt).

CLI: This does not change your graphical desktop environment. This package provides better kernel hardening, improved entropy, and other security features.