QubesOS had the right idea. You want layers and layers of security, with multiple VMs at the root.
> had the right idea
Is it no longer the right idea?
I mean that in the sense that they had the idea way before the wave of rapid linux 0days and supply chain attacks were common. The design they picked has only become more relevant.