Less privileged code would mean less zero day exploits. Qubes relies on an order of magnitude less privileged code than Linux, and I believe Xen has had far fewer escalation of privilege exploits than Linux kernel

"Open suspicious links in disposable VMs" change that to "Open all links using the appropriate process"

But yeah, the social engineering though...