Have tried numerous setups on different hardware.
My go-to computer for getting actual work done nowadays when on the move is a 12th gen Framework, dual booting to either an ameliorated version of Win10 for certain work that cannot be done except in a true windows environment, and EndeavorOS (Arch based linux distro) preferentially for everything else.
This covers everything I need to do from a practical standpoint, while minimizing risks & exposures to an acceptable (for me) point. This combo has so far covered 100% of everything I want to do for both work and light entertainment.