[walterbell]

Yes, see Qubes to understand the level of effort required for robust isolation between desktop AppVMs.

[eropple]

Totally. It's not a simple task, and what this post describes creates a threat model that I would generously term "dire."