[mormegil]

Yeah, that's the classic https://xkcd.com/1200/

I thought about using Qubes OS on my new computer but it seemed like a lot of work and tweaking and still having to live with the limitations so I abandoned the idea.

[jacquesm]

It does guard against someone installing a keylogger or network trick. I wonder how Samy's USB stick would fare in such an environment.

[ElectricalUnion]

If you're really paranoid, Qubes has a "USB qubes" vm to handle untrusted USB devices. Then you only need to trust that the attacker can't tamper with PS/2.