@ifreund Nice, thanks!
I am right now trying to migrate my setup to use more flatpaks, especially for anything internet-facing. I really like the qubes OS idea, but my main setup is too integrated to be split into VMs. Having at least browser, email and IRC sandboxed is the next best thing I think. Maybe I'll even forbid programs running in the host OS from talking to the internet eventually.