Yes, don't give your main account admin sudo access without a password.
Keep backups on an external file store just in case.
Use a filesystem that has snapshot capabilities.
Keep backups on an external file store just in case.
Use a filesystem that has snapshot capabilities.
Snapshots on an external system is useful but few are disciplined enough to take regular enough snapshots.
I'd argue the root/normal user separation is largely useless on single user desktop computers.
You want a world where a browser exploit can drop a bootkit? Nahhh