I don’t think anyone is gonna hack you because of bash being a larger codebase
If I absolutely had to pick one as insecure, it would be anything other than bash since it has been around for so long, has its code read by so many people, that there’s no way that a major hole exists in it
Overall though I don’t think security or performance is a good metric for you to pick something as simple as a shell, just pick the one that gives you the best experience and features. Being compatible with bash is a big plus because it’s the industry standard, like zsh for example


Rawtherapee is really fucking good, I used it on Windows before discovering Linux