And they've been proven correct. Even the "secure" variety with hardware level encryption turned out to be vulnerable.
Even Xen (VM used by Qubes) periodically has CVEs, although they don’t always affect Qubes due to additional layers of defense and/or limited hardware targets.
alt Hacker News
Even Xen (VM used by Qubes) periodically has CVEs, although they don’t always affect Qubes due to additional layers of defense and/or limited hardware targets.