I love Qubes OS! It's like having a cluster of virtual mini-computers at your disposal! Anything you don't want having network never gets network. Any darknet or VPN router you set up properly (and you can run multiple simultaneously), anything downlink of it will never escape to the clearnet. I have AI running with a passed-through secondary GPU. You can even run Windows in Qubes OS! Strongly recommended to have 2+ video cards (assign the weakest as primary in EFI, for dom0).