I clone and try lots of GitHub repos, macOS and terminal apps, npm and python packages as part of my work. I am worried about using the same user/session to also do my production dev work and my online banking etc.<p>How do you separate these things in your daily workflow?<p>With macOS you end up having to trust and grant a lot of permissions to untrusted code get things done, but most things don’t need to share the same environment, network, fs etc to function. How can I do this without going full on “QubesOS in a VM” route or constantly switching between users?