This is exactly how Qubes OS approaches it with security through compartmentalization: You run everything in VMs, and any compromised VM will not lead to a comp

This is exactly how Qubes OS approaches it with security through compartmentalization: You run everything in VMs, and any compromised VM will not lead to a compromise of the whole system.