I know what i asking is quite risky, but if this one liner template/script is openly at git we all can work together hardened those template right? and the most important is having those auto template in official community watch lists… so we know reviewed one and unreviewed one the open port risk, etc.
for example 1 liner to create a gaming one, including for nvidia or amd gpu after run that 1 liner user can just open it and start gaming without headache setting this and that in result quitting qubes-os
or maybe we want just office, you know those nasty office comms with dirty unclean viruses /malware infected documents lurking in an everyday low paid offices… like dude help me write simple website for this documents open up then virus inside, we can just kill that one and reuse the auto backup before virus hit…