Comment by ubedan

I would also look at Qubes. It basically reinstalls a new desktop vm every time you boot the computer, and allows, but has extra safe guards for using usb, cut-copy-paste, templates, support for tor etc. But it's slow for obvious reasons.

https://www.qubes-os.org/