Running projects in rootless containers from the beginning goes a long way for baseline workstation security, clarity about project dependencies, and ease of managing multiple environments.

Strongly recommend additionally keeping work isolated to employer-owned hardware, though.