if the host is infected your screwed, and you're not safe with dual boot, either there are some exploit to spread the infection to another partition that is using another so

the only possible way is to have two ssd, and one only active at any time, so you must un-plug the power from the other, so it's not recognized