I will endorse Qubes, Whonix and manual isolation with virtual machines. These techniques are the current cutting edge of computer security IMO. Some people will disagree, but thing is even if you had javascript enabled on a vulnerable version of the browser in a Windows VM, feds wouldn't have been able to pwn you if you had it isolated properly. Isolation is the final strong layer of security that keeps you safe when all else has failed, and not having it means that when all else fails you are fucked.