Ubuntu uses Debian sid as a upstream source for its source code, but not everything comes from there. The packages Ubuntu uses are its own, with the source code imported creating Ubuntu packages anyway.
The packages from upstream Debian may contain defaults/configs as provided by the Debian team; Ubuntu team devs often don’t amend these; but create their own in Ubuntu packages; thus you can install a desktop on Ubuntu Server and get some of the defaults from upstream Debian; but use different packages to install that desktop & you’ll get the Ubuntu flavor version of that same desktop. This effect means distros downstream can have a slightly larger quantity of packages; and whilst you may achieve two sets of configs; in effect its not anything new.
For the distros that don’t build their own system (ie. your list of distros included many that use binaries from upstream sources) those can have inflated results as the same package will get counted more than once; if it’s a Ubuntu based system for example; the count may count the Ubuntu package, but you’ll also have the version of package (inflated version number) that does the same thing of the downstream flavor; the inflated version on the downstream based on system will mean that package can be expected to be installed & used. Does your count of packages remove this duplication? I suspect it doesn’t; Pop OS, Linux Mint, Elementary are based on systems that do use Ubuntu’s binary packages.
If I was deciding which GNU/Linux distro I’d want to use, the package count is NOT something I’d consider.
I’m using Ubuntu plucky right now, but I also do use Debian. As far as I’m concerned; the package differences between Ubuntu and Debian are mostly moot, and it’s the timing that matters to me most (ie. I’d spend more effort deciding if I used a LTS, non-LTS old-LTS etc; or in Debian terms testing, stable, old-stable etc. My secondary Debian desktop runs testing, so its pretty much the same as me here on Ubuntu’s development release… I have other systems, and whilst most are running a stable release, most also run Ubuntu as its easier for me, and packages are not what I consider.
Different distros have different security profiles; Ubuntu’s is rather easy to work out given the repository of where packages are found tells gives you detail; but your look at totals ignores that detail anyway.
When it comes to removing/dropping packages; in many cases Ubuntu/Debian do it at the same time, which given my use of testing on Debian and development here on Ubuntu; it appears the same time usually for me; however if using a stable release you may not detect that did it at the same time, as Ubuntu LTS is always released April of the even year, where Debian is the odd year when it’s ready; thus timing never aligns.
Package differences between Debian & Ubuntu (or systems based on those) will be minimal I suspect; differences in packages of those and say Fedora, or OpenSuSE maybe more significant; but even then the package count is NOT what I’d consider if choosing a distro.
I’ve made my choices; I don’t use just Ubuntu, but I’m using Ubuntu 85%+ of the time (some of my files are on a Debian server, but I’m ignoring servers to make 80% guessimate somewhat easier to guess)