Qubes offers the strongest protection against these threats. It's surprising it isn't more commonly adopted.