One "practical" reason is that its relatively easy to make a Debian-based derivative distribution due to the large amount of prior art, tools and manpower. Now, if we could integrate Qubes-style isolation with Debian then most of this could be ameliorated. :)