Thanks. I do appreciate that there are vulnerabilities. So I work only in VMs. I do nothing on host machines except to run VMs, and keep the OS up to date. And

Thanks. I do appreciate that there are vulnerabilities. So I work only in VMs. I do nothing on host machines except to run VMs, and keep the OS up to date. And I compartmentalize rigorously. Minimally in different VMs. When it matters more, in different host machines. And when it really matters, in different host machines on different LANs. Only text files cross important security boundaries. And machines that my ~anonymous personas use never see anything about my meatspace identity. This is, of course, just a hobby.