[fsflover]

> That alternative presumably has better security

Not necessarily: https://www.qubes-os.org/faq/#how-does-qubes-os-compare-to-u...