Procedure for keeping sensitive data from ever touching my normal hard drive

blibly: > The idea is that in case malware gets onto my computer, it can’t find traces of things I really want to keep private. If your threat model isnt a fear of the physical harddrive itself, but the threat of future malware gettting installed, then this is the textbook use case for QubesOS. Data is partitioned into VMs, Xen hypervisor makes the contents of VMs unreadable to one another. For your use case, youd simply create a ‘Sensitive Data’ Qube, and install no programs & allow no network access