When I made my sys-* qubes disposable, I based them on my Fedora-35-dvm, but I just now realized that this disposable template has a net-vm (vpn-vm) assigned to it, for when I load disposables to browse and perform online functions.
Question: Did I make a mistake by using this network connected template as the template for my disposable sys-* qubes?
No networking is assigned to those specific VM’s (i.e. sys-usb), but of course the template is net connected which I know is not smart.
Please help clarify if I have made a mistake in this respect and what the security implications of it is.
I take it the proper solution is to have a disposable template without an assigned net-vm and base them off that.