Qubes is a cool idea, but it isn't enough for me. If it works for you, it's good. But I never want my bare metal touching anything directly. I would suggested a small CLI Tor gateway (like Whonix), and then a few full-blown VMs connecting through it (or NAT, depending).

#[5]