[Vendome]

Sure, why not use a VM?

If it gets whacked use another copy.

[zeugma]

Not only can you wack the vm if it is comprised, you can alsocreate it so that state information is never saved. That way, it is always a pristine image each time it boots.