Desktop Operating System with high security

ChromiumOS has a pretty neat sandboxing model (Crostini) for this. Though, I don’t imagine you are okay with Chromebooks?