Similarly, I've had a canary unencrypted BTC wallet in my computer for years.

I've always been security conscious and I role play my Arch as a Qubes "dom0" and use VFIO for GPU enabled VMs, which I know is not the Qubes way, but I'm also not that at risk.