There's no reason why everything should happen on the same machine, hardware is relatively cheap. Don't shit where you eat; don't do your web browsing / videoconferencing / exploration of interesting new tools on the same machine from which you have privileged access to sensitive things. Virtualization is an option, but just buying an extra laptop might be more straightforward.