Awesome, thanks!

The partitioned live-usb method looks like the best ratio between security and practicality.
Someone should write a tutorial on it