[m_mueller]

Or, do exactly this with an offline windows VM on a POSIX host. Even with enabled file sharing it should be reasonably secure in terms of privacy and at the same time convenient. The only usecases where this is not ideal: gaming and graphics heavy applications.

[garaetjjte]

If you have multiple monitors and graphics card you can assign one to VM with almost no performance loss.