RHEL products, including Fedora, come with a fairly usable SELinux out of the box. By extension, so does Qubes OS.

I currently run a QEMU setup at home with different VMs, all Fedora, for different domains of use (internet, work, development/art, untrusted, a clean environment for installing OS's, etc) in the spirit of Qubes. Regular backups of everything are made frequently.

In the highly unlikely event of a ransomware infection, it would be limited to a single domain.

I believe this is the way forward for personal computing.