I'm a big fan of the Qubes OS project, and I think they're on the right track there: https://www.qubes-os.org/ https://www.qubes-os.org/ Basically, have the de

I'm a big fan of the Qubes OS project, and I think they're on the right track there: https://www.qubes-os.org/ https://www.qubes-os.org/ Basically, have the desktop environment running in a non-network-connected machine, and have different VMs for different purposes with application windows seamlessly appearing on the desktop. If I have a spotify VM (or even listen in a disposable-removed-on-close VM), there's nothing for them to access. EDIT: Not saying this is for everyone. At this point I would not let my grandmother use it. But I can see the concept becoming very easy to use.