this really reminds me of qubes browser https://www.qubes-os.org/news/2018/01/22/qubes-air/ "Instead, she can access Qubes-as-a-Service with just a Web browser or a mobile app."

Example nixos config running it 2yrs ago

Source available at

James Smith