What extra layers of protection should I add for better security on Qubes OS 4.3?

[fsflover]

Related:

Hardening Qubes OS?

A few interesting hardening tips here: "Now You're Thinking with Qubes". Using different operating systems may also improve your security through isolation (depending on your threat model). Qubes provides quite a few different OSs: Documentation | Qubes OS and minimal templates: Documentation | Qubes OS. See also:

Easy hardening for beginners

Although Qubes OS implements more hardening than any other system, I respectfully disagree here. A lot more can be done by default as mentioned here, and in very, very, very, very, very, very many Github issues, along with adding many more OSes to improve the security through compartmentalization. Not all of those things may be helpful to newbies, some may complicate the usage of Qubes OS. But it’s, in principle, always beneficial to add a GUI somewhere with such hardening options.

Template Hardening

This is not so simple. Do you expect that someone can come to your home and take your machine and read your data? If yes, you probably should use TAILS, not Qubes. Do you expect that someone can infect your BIOS while you leave your computer unattended? Then, you should use Heads or AEM. Do you think that state actors are trying to get you? Then, you have almost no chance to hide. Enter your passwords under a blanket, live in hotels for no longer than a day, and it will not help you. Now, real…