Keep your banking related system separate from the system in which you install closed source stuff.
That includes stuff like GPU drivers.

I wish that could include stuff like microcode.
Guess if you can afford RISK V, then it's worth it.