My host machine is running Windows 10. I've installed VirtualBox and use it to run an Ubuntu VM. Inside the VM I use Firefox to do all of my web browsing that doesn't involve entering sensitive data like important passwords, financial data or government id info.
I use another separate Ubuntu VM for just the following: - checking my email and social media - shopping from amazon and newegg
On my host (the windows machine) I use the paid version of Bit Defender Total Security to perform regular scans and it is configured to its default settings.
Finally for banking and logging into government websites, I use a separate (physical) Chromebook, which is exclusively for those purposes and strictly nothing else.
Is this all a good security practice? Or is it all just a lot of extra work for nothing?