Im not sure whats your question/s specifically.
Nevertheless, qubes is good for now, qubes done pretty well in containing the operating systems (specially debian and fedora).
Futuristically this is not enough, it needs to be taken one step further, which is securing the packages within its own VMs. So instead of entire OS in a VM, it will be an app within a VM.
Full vision can be viewed here.