Mark Dain
I have a crazy idea. Could you run a light OS that has just enough to run a VM which is your actual OS; You use the guest for everything. - The guest needs no special drivers; hardware like Wi-Fi is abstracted away to Ethernet. - You have a "hardware" firewall that malware can't disable; NAT in the VM and/or iptables on host. - You can encrypt the VM's disk if you want/need to. - The host has no services & almost no programs so virtually all infections should be contained to a VM you can roll back to a healthy snapshot. - The host almost never needs to be updated; you can't break your computer in a way you can't recover from.
Mark Dain
The host OS would probably be comprised of Linux, drivers, systemd and Xen. What drivers is everything you'd need the guest to do, like networking and graphics. I'm not sure if a GUI is needed on the host to pass it over to the guest. If it is, I'd want something like, X11 without a window manager, if that's even possible. I'm thinking of building a base from Arch or Gentoo for this