I agree that with linux, once you're in, you're in. there is virtualization but that's annoying and slow, or ig you could not use internet(pretty much impossible) or very strict firewall rules, and then use some kind of proxy but that would not be a problem if it were hacked, and would resend the data but maybe fromna reader mode, which you could display with a minimalist browser.