I wonder about a setup where I can have a primary OS on my Laptop, but keep a second OS that is safe, anonymous, persistent and isolated (for sensivite data that may communicate with the outside world).
The idea is that I can use the second OS to use the internet anonymously and keep private data that I don't want linked with my person in case my primary OS becomes compromised.
A Virtual machine wouldn't do it because a compromised host would have access to it. So I am thinking a dual boot with something like Whonix as encrypted secondary OS would be the safest option.
In this scenario, there is still a risk of a compromised Whonix having access to the primary OS partition, but is mitigated by the inherent security (Inernet connection via VM).
Are there simpler solutions for maximum security to isolate sensitive private data from everyday computer use not involving dual boot? Is there any caveat in the use that could lead to cross-contamination?