compartmentalization
top reasons why GrapheneOS is highly praised: ability to create different profiles with different encryption keys, and hardened codes.
on Linux, the top choice is QuebeOS. But i tried it 4 times and still couldnt go with it. My laptop couldnt handle quebeos…
The other choice is SecureBlue. I heard that is called the Graphene of Linux. They have hardened codes, secure browser and very strict secure defaults. The downside? You need to be able to use distrobox, flatpak, rpm-ostree, brew to maintain your apps. So in a way, it is the same compartmentalization, but a bit messy.
If u cant deal with these 2, then maybe use TailOS to do your download. Not sure if it saves the data?
Using VM is also great. But i think a “super VM” is the only answer and that is QuebeOS. You can literally control everything inside each VM.







only on phone
but Secureblue, a Linux distro, really follows Graphene’s security hardening stuff.