My home setup

Insurgo laptop with Qubes OS

• Trading: Has only firefox installed with metamask. All important links are already bookmarked. It goes through Tor + VPN (dedicated IP) so that I don't always see captcha errors.
• Vault: All my licenses, passwords, and everything is stored here, with no internet connection. Even if this is compromised, there is no problem as I use 2fa for all critical accounts.
• Personal: For general usage. It has firefox, signal, Veracrypt. Connects to the internet via VPN.

M1 Macbook laptop with Ubuntu installed as VM, all trading is inside of that VM

• Little snitch blocking all iCloud and apple services, also checking what is going on. Setup can be a little tricky, but it will be worth it
• If you do not want to pay, you can use Lulu
• I do not use icloud, as none of the cloud services can be safer than being offline.
• Regular backups with Carbon Copy Cloner
• Klockknock to check what is going on in the computer; it is an open-source app to see what is running.
• I use brew to install almost everything; as I don't have iCloud account, I cannot use the app store.
• FileVault enabled

Protectli pfSense Router

• The whole network goes through it
• ProtonVPN is always one; if it gets disconnected, it cannot connect to the internet. It connects to the closest server, so there is almost no speed loss.
• Cloudflare DNS is enabled within