I realize I am late in replying. What I do, while using OpenBSD, is limit which users access which apps, dividing my activities by user according to risk level

I realize I am late in replying. What I do, while using OpenBSD, is limit which users access which apps, dividing my activities by user according to risk level and which apps a given user uses and sites that user browses to (some user accounts I use regularly do not use a browser). Also obsd has pledge and unveil built in, which are kernel API calls they put in apps which limit which syscalls and directories an app can access. Those combined give me some increase of confidence. (Edit: On Debian I could do this with multiple simultaneous X sessions, moving data between them via a shared text file. On obsd, one could use SSH and some scripts, so they can share a desktop if/when desired.) Maybe there is a maturity and effort level continuum, where we can help people along as appropriate, per their desires, interest, and situation.