1) Chromebook for web, social media. Separate profiles for personal trusted (banking), personal untrusted (browsing and social media), office/client work.

2) Separate laptop as VM host for development. Never pollute the host with third-party libraries or anything downloaded from the web, all that happens in disposable guests.

3) ssh and sftp from Chromebook to VMs as needed.