Qubes OS actually aims at this, if you're serious about security. Of course, there is absolutely no way to completely suppress any attack surface, but compartm

Qubes OS actually aims at this, if you're serious about security. Of course, there is absolutely no way to completely suppress any attack surface, but compartmentalization can help.