True opsec is impossible without living in a dense growth forest without any electronics, but ill give some examples in no order.
1. QubesOS (goodluck running this on low-end pcs), basically puts every single program you use in a seperate virtual machine, so if one gets infected the others dont (probably the best and slowest on the list)
2.Tinfoil hat linux, old and shitty, made to literaly scramble electromagnetic outputs of your screen so glowies cant use tempest and read it with RF forensic tools.
3.TailsOS, boots off a usb drive, deletes every trace of itself after unplugging, good for public pcs (ex. libraries).
4. Whonix, simpler Qubes, 2 virtual machines, one for networking and tor, other as your workspace, so if it gets infected it has no access to your ip.
Post too long. Click here to view the full text.