KISS : Have a separate device to do banking, and ONLY banking on.

(More tech savvy users could instead boot into a different partition.)