For people with multiple monitors if you get too much distracted you should try just using 1 monitor it works for me to get my attention to work related things.
I never liked PvE in EVE except for wormholes where I made hundreds of billions but that was with old accounts.
I always paid with real money until I made lots of money without doing much. Kinda seems unreal for beginners to pay with in game money ( unless they changed it last year ) specially if you have a job.
It all depends how you want to make your isk, I don't know what the best way now is but before it used to be in nullsec running anomalies pretty sure you can start after 2-3 months training doing that with an average of 50mil an hour for beginners, one would need about 20-21 hours of spending making money to buy a plex
While SELinux enabled distros usually comes with a targeted mode by default Gentoo hardened has strict mode in it's policy rules, everything is confined with that policy.
Usually only targeted applications are confined by default and allowing unconfined applications to run without any protection.
Apparmor is easy and anyone can understand how it works after reading the wiki, while apparmor also has neat functions you need to compile them in sadly :(
OpenBSD is great, first you can leave it running for a long time without thinking about security bugs or updates, instead Linux you have to keep close eye to kernel updates & application patches, that's why things like mailservers & DNS & NTP and more are running OpenBSD because I know it doesn't need critical updates every week and uptime is critical for me.
Last time I checked they were working on a TBB sandbox [1]
Let's hope it will be there soon, subgraph has oz[2] and can be used with any program really then there is firejail[3] but these 2 are only on Linux available.
VMs are all nice and that but if the exploit can compromise the TBB it's too late already, sandboxing needs to happen in the browser on Linux you can use namespaces + strict seccomp rules but don't know what one would use for Windows.
First priority would be to sandbox the browser and work your way down if you want to sandbox more stuff.
For Windows EMET can help to prevent certain exploits I guess but yea a browser that can access anything on the filesystem & system calls is badstuff.