Subgraph is still alpha version and it even says on the site: 'Not for real use'. Until SG is more fleshed out I'm sticking with TAILS.
If you really need to not have your ID leaked, like the UAE recently going after dissidents with state malware, you'd want to use something like Subgraph with a seperate firewall/NAT internal address as insurance (pref running OpenWRT or a BSD not the default proprietary lighthttp server 'admin portal' firmware running with full privs).