Yeah, Shizuku opens up a massive attack surface through ADB. ADB can do a lot to your device without you even realizing it in a lot of cases, and you’re basically giving ADB access to Shizuku itself and any apps that use it (which could be exploited) at all times, so its very risky. Its pretty dangerous and definitely best to avoid an app like this.
I 100% agree, its best to just stick to upstream Fedora imo. Glad you made this comment. The security issues of Nobara always put me off, especially since basically everything it does can just be applied to regular Fedora. I think Nobara would much better serve as a script or toolkit, similar to Brace, or something along those lines instead of an entire separate OS with the security issues it brings.