“Qubes-like VM-based isolation with declarative configuration” is what Spectrum[1,2] tries to build on top of Nix. It’s in active development, but doesn’t seem to be particularly usable yet.

[1] https://spectrum-os.org/design.html

[2] https://news.ycombinator.com/item?id=28530861