Mark Dain
I have a crazy idea. Could you run a light OS that has just enough to run a VM which is your actual OS; You use the guest for everything. - The guest needs no special drivers; hardware like Wi-Fi is abstracted away to Ethernet. - You have a "hardware" firewall that malware can't disable; NAT in the VM and/or iptables on host. - You can encrypt the VM's disk if you want/need to. - The host has no services & almost no programs so virtually all infections should be contained to a VM you can roll back to a healthy snapshot. - The host almost never needs to be updated; you can't break your computer in a way you can't recover from.