Sacchin

Valve still collects data about you, so SteamVR isn’t truly private.

If privacy matters to you, look for a PC tethered headset that runs on open source software, so you can avoid telemetry and closed ecosystems

Yeah I might have gone a bit overboard. I said F-Droid because I wanted something that could update Obtainium and also serve as a store to search for open-source apps

Well anyway, I deleted F-Droid to reduce attack surface. Thank you very much!

If your only concern is keeping Google and Microsoft off your back, the carrier advice is optional. Please remember and keep in mind that your phone is a tracking device that always collects your data, and there’s no way around that

1. Don’t use multiple profiles on your private phone, doing so can mix metadata.
2. If you ignore point 1, always close your other profile manually in Settings after switching.
3. Don’t sign in to Google or Microsoft accounts on your GrapheneOS device.
4. Rely on Obtainium and F-Droid for apps.
5. (Optional) Avoid installing Google Play Services.
6. Keep your phone in airplane mode, and set Wi-Fi to turn off automatically one minute after you leave home.
7. Avoid SIM cards, since carriers can track your location with extreme precision.

Ultimately, GrapheneOS is just a de-Googled OS. Don’t walk around with a false sense of security just because you use it.

Yes but we are talking about security and the risk of cross contamination. Would you really set up a VM and download risky files on the exact same Linux machine that holds all your personal data? I wouldn’t.

It’s best to start using different OSs for different things assuming that no single OS is truly safe

You can just use a VM and an antivirus on Windows. Linux isn’t really necessary for your scenario