https://github.com/CyberShadow/aconfmgr

Aconfmgr is a good solution (practical trade-off for me). When it feel like "my OS must be dirty at this point", then I spend a couple minutes with this and I'm back to the clean state.

I don't do this more then twice a year, so if you insist on an always clean system, YMMV