jet , 11 months ago (edited 11 months ago)

Depends on your threat model.

A air gap system is the gold standard.

A virtual machine is a reasonable middle ground, and of course you cut the network access.

Qubes lets you do both but it sacrifices some performance.

A word of caution about dual booting systems: if something is running on the computer, it in theory has full access to everything attached to that computer, including unmounted drives, encrypted drives, even BIOS. There are Trojans that install themselves in the boot partition, and it’s possible an infected operating system could infect the non-infected operating system next time you boot.