Qubes OS has a defense agains USB attacks. It just reads the USB stick inside a dedicated VM and then, if necessary you attach it to another VM.