It's a lost battle. Everything will need to be run in a VM separated from your main desktop which should have your data and a minimal amount of apps. Qubes OS

It's a lost battle. Everything will need to be run in a VM separated from your main desktop which should have your data and a minimal amount of apps. Qubes OS was ahead of it's time.