For someone who deals with dangerous files and websites frequently or even for the general user what is the way to avoid getting infected by spyware/virus permanently?
I am looking to buy a new laptop and the problem mentioned above is what I am worried about. Here is one idea that came to my mind: Use two usbs. One is a live USB to be used as the operating system and another for storage. And I encrypt the harddisk completely before so some malware can't jump there. Or could I install the operating system on my USB? I could have multiple usbs with different operating systems. The priority is to protect the laptop from getting infected by an undetectable/unremovable pegasus kind of malware. Will the bios be secure using this method?
Should I also look for some specific type of hardware when purchasing a laptop? Like a non programmable bios if available?
What do you suggest?