Awesome thoughts!

I think you should look at qubes-os, it would be nice to have their concept with LXC or maybe with docker/podman to more efficient image storage with shared layers and so on