I've always wanted to switch to qubes, but it just feels so constraining. It's safer to never leave the house, but I don't want to live in a self imposed prison. On the other hand, the isolation provided by containers and flatpak is more accessible, but with a much larger attack vector.

Maybe we need immutable OS + an audit layer on anything that could allow exploits to persist (bashrc and the likes).