Fine points. And I am considering that simplicity might be worth it. Except for:
Another fix might be moving towards software that doesn’t require the capacity to reverse updates frequently.
Totally solid advice, but I love my rolling release distro though. So for the time being I’m willing to accept the associated risk.
Would a VM work? I’ve read that you can run MacOS inside a VM. Though I haven’t attempted it (yet). Could do Windows in a VM too but virtualized ad-riddled spyware is still ad-riddled spyware.