Qubes OS is pretty secure, everything you do in it is in virtual machines. That includes putting wifi and usbs in separate virtual machines. The root virtual machine is completely separated from everything else so any attackers can’t get access to it. There are also temporary virtual machines that you can use for unsafe stuff.
Imo its understandable since he’s going to have to live in russia for the rest of his life if he doesn’t want to live in a US prison for the rest of his life.