[fsflover]

You can use TPM with Heads and a hardware key to ensure Windows can't infect the other partition.