I'm seriously strategizing how to best run a separate user-account for banking etc., to defend against a user-level compromise of my day-to-day stuff. It seems

I'm seriously strategizing how to best run a separate user-account for banking etc., to defend against a user-level compromise of my day-to-day stuff. It seems like anything that involves sharing a desktop window (e.g. xhost tricks) is not really security worth the effort, I've got to at least stop block any malware that monitors the screen, clipboard, keystrokes that come after the phrase "sudo", etc.