If you're already going to these lengths to compartmentalize, you might as well just run Qubes. It's really not much more mental overhead. Plus you get nice fe

If you're already going to these lengths to compartmentalize, you might as well just run Qubes. It's really not much more mental overhead. Plus you get nice features like different color window borders for applications running in different profiles, properly permissioned inter-profile RPC, virtualized networking ('personal' gets networking from clearnet 'sys-firewall', 'work' gets networking from 'work-vpn', 'project1' gets networking over Tor from 'sys-whonix', etc.), and much, much more.