isolatte

In order of decreasing isolation:

For hardware and system's security QubesOS(i) is superb for isolation at the (virtual)machine layer. This talk(ii) from Micah Lee when 4.0 launched is a great overview/preview. It's my daily driver, and I find it indispensable.

For software security any standard linux distro you can utilize encrypted chroots(iii). This is how things like crouton(iv) work on ChromiumOS.

For library isolation you could utilise virtual environments like virtualenv for python. ( or nodenv(v) for 'Node libraries')

(i) https://www.qubes-os.org/

(ii) https://www.youtube.com/watch?v=f4U8YbXKwog

(iii) https://linux.die.net/man/1/chroot

(iv) https://github.com/dnschneid/crouton

(v) https://pypi.org/project/nodeenv/