I have the same concern. Something might be worth looking into is replacing docker with Podman because it runs as the authenticated user rather than using a dae

I have the same concern. Something might be worth looking into is replacing docker with Podman because it runs as the authenticated user rather than using a daemon running as root. Also, I believe Podman desktop allows for multiple VMs. Also consider QubesOS. Where everything runs in a VM (if you can find appropriate hardware on which to run it). Less flexible but easier to install is ChromeOS FLEX (or a high end Chromebook). Like QubesOS, ChromeOS lets you run Linux in a VM but with the ability to open native windows.