selinux relies on the basis of deny all, allow only ideas. On paper that’s fine, but when you are troubleshooting issues, installing software or developing applications, it can hinder productivity by preventing the user from doing things.
Selinux CAN work, but it absolutely requires a lot of time investment and maintenance to keep it working well with audit.d and general logging.
Love these, keep it up!