You can do some fun stuff by moving your gpg keys and keepassxc files off onto a remote tor hidden host and mount the file system to that. Keep all your links and addresses and kleys in the rmeote host and access it all ONLY from a disposable whonix AppVM, this way there is literally nothing that can be found locally if you manage to kill the dispVm