Isolation is a good second line of defense. It's not going to prevent malicious input to produce malicious output. At least not until you go as far as Qubes OS

Isolation is a good second line of defense. It's not going to prevent malicious input to produce malicious output. At least not until you go as far as Qubes OS and you squeeze everything through a rasterized bitmap.