I've personally come to be very happy with hardware isolation as a method of mental compartmentalization.

E.g. choice of computer dictates choice of activity, I won't accidentally work on something when I'm not supposed to.

I've had paid-for open source gigs, and I have a bunch of open source work spread out on a bunch of machines.

Downsides are:

  - The bag gets heavy when I have multiple events for separate customers/events on the same day
  - For stuff that is shared between computers (e.g. open source projects), I can forget to git push

Fortunately, the most locked off machines never need for other computers to connect to them.

And yes, this came as a customer requirement, but I've decided to grow with the choice.

I don't trust process isolation on a single computer very much.