PB
Back in the day I used Autocad and we would set up a VM in ram so that the software could be uploaded to the VM. This would increase throughput because ram access is faster than HDD access.
I've been wondering about using this feature for just this reason to Isolate browsing software from the rest of the OS/software thus blocking outside attacks.
Same thing could be accomplished with a Budget Mini PC dedicated to just internet access and a backup/restore feature