>>My setup is to basically have two systems: a work laptop, on which I try to keep everything professional so that if and when it is hacked the damage will be minimal, and then a second laptop, which I use for anything personal and never connect to my work system.
>Sounds like a perfect use case for Qubes OS.
There's the "pre-owned" aspect of a work PC though - your employer could install software to monitor everything you do.
Qubes is cool but it's not practical to carry 2 laptops. If your threat model is just an employer snooping and not a nation state, a smartphone with a 4G connection should be sufficient.
(Out of an abundance of caution I also run my 4G traffic through a VPN)
>Sounds like a perfect use case for Qubes OS.
There's the "pre-owned" aspect of a work PC though - your employer could install software to monitor everything you do.
Qubes is cool but it's not practical to carry 2 laptops. If your threat model is just an employer snooping and not a nation state, a smartphone with a 4G connection should be sufficient.
(Out of an abundance of caution I also run my 4G traffic through a VPN)