> For some isolated and rollbackable option, your only options are Silverblue and Guix for the hard way.

How about Qubes OS? Also the parent never said anything about isolation and roll-backs. Nobody mentioned Silverblue except you. The discussion is about ordinary users, not hackers.

Silverblue is supposed to be for normies. Rollbacks are for when you screw everything up.

But honestly I did not like Silverblue. I had a 13 year old gaming computer I installed it on and I couldnt get the ancient GPU drivers installed due to the way things are containerized. This would have been a few commands otherwise.

Maybe its fine for chromebook-like things. I might have picked a bad testcase.