> I now run personal and professional browser profiles from two different jails / cgroups. It's a pain in the arse to set up, and I have to verify my config still works after every update

You may be interested in Qubes OS. My daily driver. Can't recommend it enough.