no, because if you used dependency cooldown you wouldn't be using the latest version when you start your project, you would be using the one that is <cooldown period> days/versions old
edit: but if that's also compromised earlier... \o/
I use Regolith Desktop packages to run Sway with Gnome.
It's basically i3/Sway + Gnome settings, and works really well.
I get the benefit of a sane DE (Sway) and somewhat easier settings and defaults
edit: but if that's also compromised earlier... \o/