I tried this secure and privacy-first OS that runs inside a VM

Well, technically, it relies on two virtual machines instead of one