I believe compartmentalized operating systems like Qubes are the future for defending against these kinds of attacks.

Storing your sensitive data on a single bare-metal OS that constantly downloads and runs packages from unknown maintainers is like handing your house key out to a million people and hoping none of them misuse it.

i am rolling back a huge number of 'features' in my personal pc and going back to extremely miminal setups

the security solution i have is where it needs to become more simple, getting rid of attack surface that is coming out of these bloated releases