If you want to use a web browser on reasonable secure way, you could use firejail:
https://wiki.archlinux.org/title/Firejail
It's not as powerful as @qubesos but it's well enough:
Eg.I run @librewolf with firejail using firefox profile:
firejail --x11=xephyr --xephyr-screen=1024x900 --net=wlan0 --seccomp --caps.drop=all --nonewprivs --noroot --profile=/etc/firejail/firefox.profile openbox --startup "librewolf"