My personal experience of attempt to harden qubes VM

[fsflover]

@zphaskqjrm

Also there is a solution called heads which is a serious secure boot solution, but again it only works on those ancient machines

Not just on ancient machines: Purism Librem 14 v1.