Volatile161 Compartmentalization
Just to touch on what you mentioned regarding compartmentalisation with Qubes V GOS.
I’m not a GOS user yet, but I am a Qubes user of several years. In theory, the newer model OS type that modern mobile OS’ follow, like GOS, AOSP, iOS, iPadOS, ChromeOS etc, is leaps a bounds more secure than traditional OS’ are. Qubes really excellently mitigates that, but should a Qubes style system be implemented over the top of a modern OS base, such as GOS, then that latter version would hands down beat Qubes as it stands today.
But - also as stands today, Qubes verses profiles on GOS, in theory, sounds comparable. In reality it’s not, at least not in anything other than a rudimentary way.
Qubes has a unified desktop (qube) to manage it all, this is completely offline. It has a Qubes manager to manage Qubes, it has multiple options of networking, vpn, tor, firewall, usb etc etc Qubes by which you can or not attach other Qubes to. It has extremely simple cut and paste between Qubes, any Qube can be any OS (actually any qube can be anything), just to mention a few of the things that make it what it is.
If this type of granular situation appeared in GOS, and if there could be a manager profile something similar to dom0 to connect/disconnect everything together, and if there can exist a secure built in and simple way of cut and paste, then Qubes for the most part would be redundant for me.
GOS is bordering a perfect system, and its security mitigations far surpass probably anything else around but it can’t be compared to the compartmentalisation abilities of Qubes yet.