I am somewhat doubtful that this is a good approach security wise. Such a system also means that you have a huge monoculture fleet that can be compromised in the exact same way.

You could still decide to provision your systems with different browsers, webserveres, whatever even within nixos.