> Install Nix in a VM or on a clean HD You should be safe to avoid this unless your threat model includes a trusting trust type exploit on Nix generating the I

> Install Nix in a VM or on a clean HD You should be safe to avoid this unless your threat model includes a trusting trust type exploit on Nix generating the ISO. Also, just realized it'll be a little more complex because you'll want to use home-manager to install Firefox plugins and do about:config configuration. Here are some examples of that in various contexts: https://github.com/search?q=language%3Anix+programs.firefox+settings&type=Code https://github.com/search?q=language%3Anix+programs.firefox+...