You forgot the actually secure option: https://qubes-os.org