i think the ultimate solution for all this is bunkers, nip-46 right? it doesn't require any special features of the operating system, but does require a feature in the relays would be good to push to get relay operators and devs to implement it... it's now going on my list because it is the best isolation method there can be... it can even be on separate physical devices