Continuing the discussion from Update via SaltStack: What Happens on Interactive Updates?:
Is there a problem with Whonix? Why do you don’t use it?
Whonix is the approved method of increasing privacy and anonymity in Qubes.
I don’t use it because of the overhead, because it provides services and
constraints that I do not want, and it does not provide services I do
want - integration with Qubes firewall.