I was wondering since there are rumours (http://techrights.org/2013/11/24/tpm-back-doors-patriot-act-...) of possible RedHat being too close to the NSA who is to rule out similar interests or ties between GHCQ and Ubuntu? Canonical is a UK company which could easily be convinced to add certain features. (see also privacy issues http://beta.slashdot.org/story/182197)
@wiml please see the link provided by @oracuk and also below: http://www.zdnet.com/uks-security-branch-says-ubuntu-most-se... http://www.muktware.com/2014/01/ubuntu-12-04-lts-declared-se... http://www.techrepublic.com/blog/linux-and-open-source/linux...
https://www.gov.uk/government/collections/end-user-devices-s...
They didn't single Ubuntu out of a crowd, they just only reviewed Ubuntu which is probably due to the brand name recognition in the government departments the advice was aimed at or possibly the experience of the team doing the review.
I have assumed that was what you were referring to and not a different statement?