It's not all or nothing. We don't need to give up because some aspects of a system are insecure. There are different threats and different answers.

Qubes got it right in its philosophy. We either get system secured by correctness or by isolation. The former is not possible on a Linux developer machine.